ecommerce-image-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates image generation using bash commands to call a local media dispatcher tool.
- Evidence: The skill uses environment variables like
$OD_BINand$OD_NODE_BINto call themedia generateandmedia waitcommands. - Evidence: It uses
python3 -cto safely parse JSON data from the tool's standard output to manage task IDs and status tracking. - [SAFE]: Implements a strict 'fidelity lock' mechanism in Step 3 which provides clear instructions to the model to preserve the identity of the source image.
- Evidence: The fidelity lock explicitly instructs the AI to preserve shape, color, and materials, mitigating risks of unintended or deceptive content generation.
- [SAFE]: Employs a defensive workflow and a P0 checklist that prevents execution without valid input data.
- Evidence: Step 0 validation and the
references/checklist.mdfile require a real product reference image and prohibit the fabrication of product claims, certifications, or performance data.
Audit Metadata