c2pa-metadata
starsforks
How to install c2pa-metadata?
indranilbanerjee/digital-marketing-pro/c2pa-metadata
$npx -y skills add indranilbanerjee/digital-marketing-pro --skill c2pa-metadataEmbed C2PA (Content Authenticity Initiative) provenance manifests in AI-generated marketing assets (image/video/audio/PDF). Use when: preparing AI-generated ad creative, social images, or video for EU markets to comply with EU AI Act Article 50 (applicable 2 Aug 2026); embedding
SKILL.md
| 1 | # /digital-marketing-pro:c2pa-metadata — Embed Content Authenticity Provenance |
| 2 | |
| 3 | ## Purpose |
| 4 | |
| 5 | Wraps `scripts/embed-c2pa.py` to add a **C2PA (Coalition for Content Provenance and Authenticity) manifest** to any AI-generated marketing asset. The manifest carries a machine-readable provenance trail (who generated it, what generator was used, what prompt produced it, when it was reviewed) plus a visible AI-generation claim in the IPTC digital-source-type vocabulary. |
| 6 | |
| 7 | This is the technical mechanism brands use to comply with: |
| 8 | |
| 9 | - **EU AI Act Article 50** (applicable 2 August 2026) — generative-AI marketing content must be marked in a machine-readable format using open, interoperable standards. C2PA is the emerging backbone. Penalty for non-compliance: up to **€15 million or 3% global annual turnover**. |
| 10 | - **NY synthetic-performer disclosure law** (effective June 2026) — $1K–$5K per violation, $10K repeat; applies to synthetic influencers and AI-generated endorsements. |
| 11 | - **FTC May 2026 endorsement guidance** — covers AI testimonials and synthetic creator content. |
| 12 | - **Australia Online Safety Act / UK Online Safety Act** — emerging deepfake disclosure requirements. |
| 13 | |
| 14 | The resulting asset can be inspected by any C2PA-aware viewer (Adobe Photoshop, Lightroom, Truepic, [contentcredentials.org/verify](https://contentcredentials.org/verify)). |
| 15 | |
| 16 | ### C2PA spec versions to be aware of (June 2026) |
| 17 | |
| 18 | - **Content Credentials 2.3** (released 9 February 2026 — [launch post](https://c2pa.org/the-c2pa-launches-content-credentials-2-3-and-celebrates-5-years-of-impact-across-the-digital-ecosystem/)) added format support for: **live video** (broadcast/streaming), **plain text documents**, **OGG Vorbis audio**, **large AVI video files**, and **EXIF Original Preservation Images**. If a brand is signing live-stream video or text-based assets for the first time, 2.3 is the floor version to target. |
| 19 | - **C2PA Spec 2.4** (April 2026 — [spec.c2pa.org/specifications/specifications/2.4](https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html)) introduces the **AI Disclosure Assertion (`c2pa.ai-disclosure`)** for machine-readable AI transparency info — this is the assertion the EU AI Act Article 50 deployer pathway will rely on. The Code of Practice WG1 (providers) and WG2 (deployers) draft guidance both reference C2PA-style assertions as the canonical machine-readable marking mechanism. See `skills/context-engine/eu-code-of-practice.md` for the full Article 50 context. |
| 20 | - The **C2PA Trust List** is now handled via the public C2PA Conformance Program (any CA meeting the Certificate Policy can join). Production signing certificates should come from a Conformance-Program-listed CA, not an ad-hoc cert. |
| 21 | |
| 22 | **For DMP outputs**: `embed-c2pa.py` now supports `--ai-disclosure`. Pass it to embed the C2PA 2.4 `c2pa.ai-disclosure` assertion alongside the existing IPTC digital-source-type claim. The combination gives you both human-readable (IPTC) and machine-readable (`c2pa.ai-disclosure`) EU AI Act **Article 50** signaling — this is the deployer-side machine-readable pathway the Code of Practice draft points to as the canonical marking mechanism. See `skills/context-engine/eu-code-of-practice.md` for the full Article 50 context. |
| 23 | |
| 24 | ## When to invoke |
| 25 | |
| 26 | - Right after any AI image / video / audio generation step in the engagement workflow (Part 11 — AI Creative Instructions output) |
| 27 | - Before handing a generated asset to the design team for review |
| 28 | - As a pre-publish gate in `/digital-marketing-pro:check` for EU-targeted assets |
| 29 | - Bulk-applying to a backlog of AI-generated assets before EU AI Act enforcement on 2 Aug 2026 |
| 30 | |
| 31 | ## Quick examples |
| 32 | |
| 33 | ```bash |
| 34 | # Single asset — image generated by Vertex AI / Nano Banana Pro |
| 35 | /digital-marketing-pro:c2pa-metadata \ |
| 36 | --input assets/q3-launch-hero.png \ |
| 37 | --output assets/signed/q3-launch-hero.png \ |
| 38 | --brand "Acme Corp" \ |
| 39 | --generator "Vertex AI / Nano Banana Pro" \ |
| 40 | --ai-claim ai-generated-content \ |
| 41 | --prompt "minimalist product hero shot, soft natural lighting" |
| 42 | |
| 43 | # Video with human review tracked |
| 44 | /digital-marketing-pro:c2pa-metadata \ |
| 45 | --input campaigns/launch-video-v3.mp4 \ |
| 46 | --output campaigns/signed/launch-video-v3.mp4 \ |
| 47 | --brand "Acme Corp" \ |
| 48 | --generator "Runway Gen-4" \ |
| 49 | --ai-claim ai-generated-content \ |
| 50 | --reviewer "Jane Smith" |
| 51 | |
| 52 | # EU-targeted asset — add the machine-readable Article 50 AI-disclosure assertion (C2PA 2.4) |
| 53 | /digital-marketing-pro:c2pa-metadata \ |
| 54 | --input assets/q3-launch-hero.png \ |
| 55 | --output assets/signed/q3-launch-hero.png \ |
| 56 | --brand "Acme Co |
People who liked this also viewed
6 picksType
- entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API perSkillsJul 2026
- azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: SkillsJul 2026
- azure-rbacOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026
- better-auth-best-practicesAgent skill from better-auth/skillsSkillsJul 2026
- firebase-security-rules-auditorA skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.SkillsJul 2026
- audit-websiteAudit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 15 other rule categories (260+ rules), returns an LLM-opSkillsJul 2026
