ads-photoshoot
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data which creates a potential surface for indirect prompt injection.
- Ingestion points: Processes 'authorized source image', 'validated brand profile', and 'product facts' provided by the user or external files (SKILL.md).
- Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore instructions embedded within the brand profile or product facts.
- Capability inventory: The skill performs file system write operations to store assets and manifests (SKILL.md, step 6).
- Sanitization: No sanitization or validation of the content of the brand profile or product facts is specified beyond 'fidelity' checks.
Audit Metadata