ad-orchestrator
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/run_pipeline.pyorchestrates the execution of local sub-scripts located in neighboring directories to perform specialized tasks. - Evidence: The
run_commandfunction usessubprocess.run()with a list of arguments (avoidingshell=True) to invoke Python scripts from other components such asad-copywriting,product-scene-gen, andad-video-gen. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes untrusted user data which is subsequently passed to downstream generation tools.
- Ingestion points: User-provided input via the
--product-infoCLI argument inscripts/run_pipeline.py. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the orchestration layer.
- Capability inventory: The skill has the capability to execute shell commands and write files (logs, metadata, media) to the local file system.
- Sanitization: The script uses
json.loads()to validate that the product information is a correctly formatted JSON object, though it does not perform semantic sanitization of the values within the JSON.
Audit Metadata