creative-signal
Fail
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
subprocessmodule to execute system commands. Specifically,scripts/deterministic.pyandscripts/audio_lane.pyinvokeffmpegandffprobefor video and audio analysis. Thescripts/sync.pyscript executes themeta-adsCLI to fetch advertisement metrics. These operations are core to the skill's function and operate on local data and known CLI tools. - [PERSISTENCE]: The onboarding guide in
references/onboarding.mdprovides instructions and templates for establishing persistence. It offers the user an optional setup for a daily background synchronization task using macOSLaunchAgents(via.plistfiles) or Linuxcrontab. While these mechanisms allow the skill to run across sessions, they are explicitly presented to the user as a feature for performance optimization. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, including video content and advertisement metrics, through an LLM (Gemini). This creates an attack surface where malicious data could attempt to influence the agent's output.
- Ingestion points: Ad metrics fetched via the
meta-adsCLI and video files processed byscripts/tag_gemini.py. - Boundary markers: The system prompt in
scripts/tag_gemini.pyenforces a strict JSON response structure with fixed enums to constrain the AI's output. - Capability inventory: The skill can execute shell commands (
ffmpeg,meta-ads), write to the filesystem (briefs, SQLite databases), and perform network operations (Gemini API). - Sanitization:
scripts/tag_gemini.pyperforms rigorous JSON schema validation and enum checking on the LLM's response before storing or processing attributes. - [DYNAMIC_EXECUTION]: In
scripts/deterministic.py, the skill usesimportlib.import_moduleto dynamically load theaudio_lanemodule. This is used to handle the optionallibrosadependency for advanced audio analysis, allowing the skill to remain functional even if the library is missing.
Recommendations
- HIGH: Downloads and executes remote code from: unknown (check file) - DO NOT USE without thorough review
Audit Metadata