alicloud-solution-content-article-illustrator
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
run_workflow.pyscript orchestrates the workflow by executing sub-processes viasubprocess.run. It calls local helper scripts such asload_preferences.py,build_outline.py, andcollect_evidence.py, as well as an external image generation script within the same repository structure. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external Markdown content to generate prompts for AI image generation.
- Ingestion points: Markdown articles read in
scripts/run_workflow.pyvia the--sourceparameter. - Boundary markers: Not present; the skill lacks explicit delimiters or instructions to ignore potential commands embedded within the source article content.
- Capability inventory: The skill possesses capabilities for subprocess execution and file system write operations.
- Sanitization: Validation in
scripts/validate_inputs.pyis limited to verifying the file's existence and its extension.
Audit Metadata