landing-page-factory-orchestrator
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
run-pipeline.pyscript usessubprocess.runto coordinate the execution of multiple sub-scripts and shell commands, such asfirecrawl-extract.shand various build utilities. This behavior is consistent with the skill's primary purpose as an orchestrator. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites via a user-supplied URL, creating a surface where malicious instructions on a webpage could influence subsequent LLM-based pipeline stages.
- Ingestion points: The
--urlparameter inrun-pipeline.pyis used to trigger extraction stages that pull content into theworkspace/brand/directory. - Boundary markers: The orchestrator does not explicitly wrap ingested content in delimiters or provide 'ignore instructions' warnings at this level.
- Capability inventory: The skill has the capability to execute shell commands and Python scripts via
subprocess.run(inrun-pipeline.py) and perform file system operations (inpage-admin.pyandrun-pipeline.py). - Sanitization: The skill uses a
slugifyfunction to sanitize file and package names, but it does not sanitize the actual content extracted from the URL before it is used by downstream components.
Audit Metadata