genviral

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses various shell scripts (e.g., genviral.sh, run_all.sh) and Python's subprocess module to orchestrate the content pipeline, manage ad campaigns, and interact with the Genviral CLI binary.
  • [PERSISTENCE]: The skill includes documentation and commands for setting up openclaw cron jobs, enabling the agent to maintain automated workflows for daily content generation and performance tracking across sessions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external URLs, including landing page scraping via lp_analyzer.py and competitor ad research via ad_library.py. This data is interpolated into prompts for generating marketing strategies and creative copy.
  • [EXTERNAL_DOWNLOADS]: The update-skill.sh script implements a self-update feature that downloads and applies new versions of skill-owned files from the project's official GitHub repository.
  • [DYNAMIC_EXECUTION]: The copy_generator.py script interacts with the Anthropic API to generate content variations, which are then parsed from JSON responses and used to drive further agent actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 10:44 PM