build-campaign

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted natural language campaign descriptions which are used to populate API request fields executed via shell commands. Ingestion points: User-provided plain-text campaign description passed as a skill argument. Boundary markers: The skill implements a confirmation step (Step 2) where the parsed plan is presented to the user as a visual tree for approval before execution. Capability inventory: The skill utilizes the Bash tool to perform curl-based network operations and the Read tool to access configuration files. Sanitization: No explicit sanitization or escaping mechanisms are described for the data extracted from the description before its use in shell-based curl commands.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute multiple curl commands for interacting with the Spotify Ads API. Evidence: Shell commands are used in Step 2.5, Step 3, and Step 4 to perform audience estimation, asset retrieval, and the creation of campaign, ad set, and ad entities.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 02:52 AM