signup-flow-cro
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were identified. The skill performs signup funnel analysis using a self-contained Python script that operates strictly on local data.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied funnel data containing arbitrary step names, creating a potential indirect prompt injection surface. 1. Ingestion points: funnel.json provided to the analyzer script. 2. Boundary markers: Absent. 3. Capability inventory: Execution of local Python script and access to marketing context files. 4. Sanitization: Not present for input step names.
Audit Metadata