ecommerce-image-workflow

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill orchestrates image generation using bash commands to call a local media dispatcher tool.
  • Evidence: The skill uses environment variables like $OD_BIN and $OD_NODE_BIN to call the media generate and media wait commands.
  • Evidence: It uses python3 -c to safely parse JSON data from the tool's standard output to manage task IDs and status tracking.
  • [SAFE]: Implements a strict 'fidelity lock' mechanism in Step 3 which provides clear instructions to the model to preserve the identity of the source image.
  • Evidence: The fidelity lock explicitly instructs the AI to preserve shape, color, and materials, mitigating risks of unintended or deceptive content generation.
  • [SAFE]: Employs a defensive workflow and a P0 checklist that prevents execution without valid input data.
  • Evidence: Step 0 validation and the references/checklist.md file require a real product reference image and prohibit the fabrication of product claims, certifications, or performance data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 11:05 PM
Security Audit — agent-trust-hub — ecommerce-image-workflow