creative-production-explore
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill initiates local script execution for batch image generation. The process uses
runtime/codex_exec_image_batch.pyand is designed with security constraints, such as disabling interactive stdin and operating within defined workspace limits as described in the Codex execution reference. - [PROMPT_INJECTION]: The skill manages user-provided creative briefs which are interpolated into routing prompts for sub-skills.
- Ingestion points: User-supplied business context via chat or the
intake.contextfield inSKILL.md. - Boundary markers: Internal routing uses specific command prefixes like
$ads-exploreror$shot-explorerto scope subsequent agent actions. - Capability inventory: The system can execute local Python scripts for image generation and write configuration manifests to the workspace.
- Sanitization: A "Brief Completeness Gate" verifies the presence of mandatory context (product, goal, audience, market) before rendering the Explore surface, preventing the processing of vague or malformed inputs.
- [SAFE]: The skill documentation explicitly prohibits the use of arbitrary external image URLs in widgets to comply with restrictive resource policies, demonstrating a proactive approach to preventing common web-based vulnerabilities in the agent UI. No evidence of data exfiltration, credential exposure, or malicious obfuscation was found during the analysis.
Audit Metadata