suede-ad-creative
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted customer data from
inputs/reviews/andinputs/comments/. The instructions require the agent to use this language verbatim, which creates a potential surface for indirect prompt injection. 1. Ingestion points: External text files in theinputs/directory and marketing context files. 2. Boundary markers: None identified for the ingested text. 3. Capability inventory: Includescurlfor network requests,npxfor package execution, andffmpegfor video processing. 4. Sanitization: No prompt injection sanitization is defined for the ingested text, although technical escaping is used for the HTML output template. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using tools like
ffmpegfor video assembly andnpxfor rendering video via Remotion. Evidence is found inreferences/imessage-video-ads.mdandreferences/generative-tools.md. - [DYNAMIC_EXECUTION]: The skill uses a data-driven HTML template (
assets/creative-review-template.html) and leverages React-based video generation through Remotion. Evidence is inreferences/creative-review-page.mdandreferences/generative-tools.md. - [EXTERNAL_DOWNLOADS]: The skill includes references to external assets, such as audio files from
bigsoundbank.com, for use in video production. Evidence is inreferences/imessage-video-ads.md.
Audit Metadata