ad-creative
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted customer data (reviews and comments) from the
inputs/directory to 'ground' its generation. This constitutes an indirect prompt injection surface as these external files could contain malicious instructions. - Ingestion points:
inputs/reviews/andinputs/comments/files. - Boundary markers: Absent; the skill encourages verbatim use of customer language to ensure authenticity.
- Capability inventory: The skill produces file outputs to the
outputs/directory and provides examples for making network API calls and executing shell commands. - Sanitization: Not explicitly mentioned in the workflow.
- [COMMAND_EXECUTION]: The documentation includes various shell command examples for interacting with advertising platform APIs and processing media files using
ffmpegand local scripts. - Evidence:
node tools/clis/google-ads.jsandffmpeg -i video.mp4 -i voiceover.mp3commands provided inSKILL.mdandreferences/generative-tools.md. - [EXTERNAL_DOWNLOADS]: The skill references several external repositories and packages for specialized functionality such as voice cloning and video rendering.
- Evidence: Instructions to
git clone https://github.com/jamiepine/voicebox.gitand usenpx create-videofor Remotion projects. - [DYNAMIC_EXECUTION]: The skill utilizes code-based video frameworks like Remotion and Hyperframes, which involve rendering video content from programmatically generated React or HTML/JavaScript code.
- Evidence: Detailed guidance on using code-based video for templated, brand-consistent variations in
references/generative-tools.md.
Audit Metadata