ecommerce-image-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill focuses on generating marketing assets using a reference-product model, with explicit instructions to maintain fidelity and avoid fabricating claims.
- [COMMAND_EXECUTION]: The skill employs a POSIX bash script to interface with the platform's media generation tool (
$OD_BIN). This script correctly uses double quotes for variable interpolation and relies on environment variables provided by the host environment. - [DYNAMIC_EXECUTION]: Uses
python3 -cfor parsing JSON output from the image generation tool. This is a standard and safe method for handling structured tool output within a shell environment and does not execute untrusted input. - [DATA_EXPOSURE]: The skill generates a local HTML gallery and manifest using project-relative files. It explicitly instructs the agent to avoid using external CDN imports, which protects user privacy and reduces external data dependencies.
Audit Metadata