static-ads
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (customer reviews, brand dossiers, and user-provided files) which is then used to construct prompts for an image generation tool.
- Ingestion points: Data is ingested through
advibly_get_brand(brief),advibly_get_brand_dossier, and user-provided inputs as described in Phase A and Phase B of the main instruction file. - Boundary markers: While the prompt skeleton in
references/templates.mduses double quotes to delimit copy, it lacks explicit instructions to the model to ignore any hidden instructions embedded within the verbatim source text. - Capability inventory: The skill possesses the capability to generate images via
advibly_generate_imageand publish content usingadvibly_social_create_post. - Sanitization: The skill's instructions mandate verbatim quotation of customer reviews to maintain authenticity, which implicitly prevents the sanitization of potential prompt injection payloads hidden in those reviews.
Audit Metadata