iblai-marketing-ad-creative
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references external repositories and services for specialized AI tasks.
- File
references/generative-tools.mdprovides instructions to clonehttps://github.com/jamiepine/voicebox.gitfor local voice generation. - The skill integrates with multiple third-party AI APIs including Google, OpenAI, ElevenLabs, and others for content generation.
- [COMMAND_EXECUTION]: Several files include shell commands intended for workflow automation and environment setup.
SKILL.mdincludes commands fornodeandcurlto interact with ad platforms.references/generative-tools.mdincludesgit clone,make,npx, andremotioncommands for tool installation and rendering.- [DATA_EXFILTRATION]: User content and ad performance data are transmitted to external AI providers for processing.
- Ad creative prompts are sent via
curlto various cloud AI APIs (Google, ElevenLabs, etc.). - Authentication is handled via environment variables (e.g.,
$GEMINI_API_KEY), which is a secure practice. - [PROMPT_INJECTION]: The iteration functionality processes external data which could contain malicious instructions.
- Ingestion points: Performance data from CSVs or API responses processed in
SKILL.md. - Boundary markers: The instructions do not define delimiters or specific safety warnings for user-supplied data.
- Capability inventory: The skill has access to shell execution and network requests through its integrated tools.
- Sanitization: The skill lacks explicit instructions for validating or sanitizing input data before analysis.
Audit Metadata