clone-ad
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/kie_generate.pyusessubprocess.runto executecurlfor secure file uploads andopento reveal the results folder on macOS systems. The instructions also direct the agent to use thefindcommand to locate recently downloaded media files in the user's~/Downloadsand~/Desktopdirectories. - [EXTERNAL_DOWNLOADS]: The skill interacts with external APIs including
api.kie.aiandkieai.redpandaai.cofor image generation and storage. It also references Higgsfield Marketing Studio for video generation tasks. - [DATA_EXFILTRATION]: Local reference images and videos are uploaded to the KIE.ai infrastructure (
redpandaai.co) for processing. This is a primary functional requirement for the image-to-image and video generation models used by the skill. - [PROMPT_INJECTION]: The skill processes advertisement content from external sources (Meta Ad Library, TikTok, Instagram, YouTube) which are treated as untrusted input. The
SKILL.mdfile contains explicit safety warnings and requires human confirmation before any action that involves billing credits or publishing content. - [CREDENTIALS_SAFE]: The
scripts/kie_generate.pyscript implements secure credential handling by loadingKIE_API_KEYfrom local.envfiles and passing the secret tocurlvia a configuration stream rather than command-line arguments, preventing exposure in process listings.
Audit Metadata