ad-copywriter
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill implements a 'Data-driven iteration' workflow in
SKILL.mdthat ingests external data from CSV files, pasted text, and API exports. This creates a surface for indirect prompt injection as the agent is instructed to process this data without specific boundary markers or sanitization logic. - Ingestion points:
SKILL.md(Mode two: Data-driven iteration). - Boundary markers: None identified in the instructions.
- Capability inventory: Text generation, platform-specific schema application, and recommendation of external generation tools.
- Sanitization: No escaping or validation of external content is specified.
- [REMOTE_CODE_EXECUTION]: The reference guide
references/generative-tools.mdincludes instructions for the user to executenpx create-video@latest, which facilitates the download and execution of remote packages. It also details the use of Remotion, a framework involving dynamic code execution of React and TypeScript to render video files. - [COMMAND_EXECUTION]: The documentation provides multiple shell commands for interacting with external APIs and setting up local software environments, including the use of
curl,git clone, andmakecommands. - [EXTERNAL_DOWNLOADS]: The skill references numerous external AI platforms and tools, including ElevenLabs, Ideogram, Flux, and the Voicebox repository on GitHub. These represent dependencies on external infrastructure and codebases.
Audit Metadata