schedule-ads
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands for API interaction and workflow logic, utilizing tools like
./secretcurl,jq,grep, anddate. - [EXTERNAL_DOWNLOADS]: Communicates with the external API at
api.admanage.aito check spend data, create campaigns, and launch advertisements. - [DYNAMIC_EXECUTION]: Uses
python3 -cto execute a small snippet of Python code for numeric comparisons within the daily spend circuit-breaker logic. - [INDIRECT_PROMPT_INJECTION]: The skill's behavior is driven by declarative configuration files (
config.yamlandconfig.create.yaml) stored in the repository, which creates an attack surface for instructions embedded in the data. - Ingestion points: Reads
skills/schedule-ads/config.yamlandskills/schedule-ads/config.create.yamlto determine ad targeting, creative content, and budgets. - Boundary markers: None identified in the prompt templates.
- Capability inventory: Perform network requests via
./secretcurl, write state to.admanage-state/, and log activity tomemory/logs/. - Sanitization: Validates the structural shape of the YAML files, ensures media URLs use the
https://protocol, and uses regex to verify that spend and cap values are numeric.
Audit Metadata