varg-ad-library-remix
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes creative content and metadata from third-party ad libraries, which creates a surface for indirect prompt injection attacks where malicious data could influence the agent's behavior.
- Ingestion points: Competitor ad URLs and data exports from Meta Ad Library, TikTok Creative Center, Kalodata, and FastMoss.
- Boundary markers: No explicit delimiters or isolation instructions are provided to separate untrusted external content from the skill's logic.
- Capability inventory: The skill uses
Bash(curl)for API communication, file system tools (Read/Write/Edit), and invokes secondary content generation skills. - Sanitization: Incorporates a mandatory
ai-ad-compliance-checkand an originality verification step to evaluate and filter generated concepts. - [COMMAND_EXECUTION]: The skill is configured to execute command-line utilities for data retrieval and media processing.
- Evidence: Uses
curl,jq,ffmpeg, andffprobeas defined in theallowed-toolssection to interact with the analysis API and manage video files. - [EXTERNAL_DOWNLOADS]: The skill communicates with external developer-managed infrastructure to perform core tasks.
- Evidence: Fetches data from
api.varg.aifor video analysis and references media stored ons3.varg.ai.
Audit Metadata