hormozi-ad-factory
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it ingests and processes untrusted data from the user to generate advertising variations.
- Ingestion points: The workflow requires user-supplied answers for product details, target audience descriptions, and unique mechanisms as outlined in Step 0 of SKILL.md.
- Boundary markers: The instructions do not employ boundary markers or specific directives to isolate user input from the skill's instructions, potentially allowing embedded commands to influence the agent's behavior.
- Capability inventory: The skill is entirely focused on content generation; no tools for file access, network requests, or shell command execution were identified in the analysis.
- Sanitization: No input validation, filtering, or sanitization procedures are specified for the user-provided context before it is used in the ad factory combinations.
Audit Metadata