onboarding-cro

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or data exfiltration attempts were detected. The skill's stated purpose of optimizing user onboarding metrics matches the implementation in the provided scripts.
  • [COMMAND_EXECUTION]: The skill includes three Python scripts (activation_funnel_analyzer.py, onboarding_checklist_scorer.py, and ttv_estimator.py). These scripts are designed to process local JSON files to perform business logic calculations and display reports. Analysis of the source code confirms they only use standard libraries (argparse, json, sys) and do not perform any dangerous operations such as shell execution, dynamic code evaluation, or network requests.
  • [EXTERNAL_DOWNLOADS]: No external downloads, package installations, or remote code execution patterns were found. All tools and logic are contained within the local skill files.
  • [DATA_EXFILTRATION]: No sensitive file paths or network operations were detected. The scripts only read user-supplied data files for the purpose of metric analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 01:08 AM