app-store-optimization

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The instructions and examples are strictly focused on ASO tasks. There are no attempts to bypass safety filters, override agent personality, or extract system prompts.
  • [DATA_EXFILTRATION]: The skill does not contain any network operations (e.g., no use of requests, urllib, or socket). It does not access sensitive files such as credentials, SSH keys, or environment variables.
  • [REMOTE_CODE_EXECUTION]: There is no code that downloads or executes remote scripts. All logic is contained within the provided Python modules which are executed locally.
  • [EXTERNAL_DOWNLOADS]: The skill does not declare or install any third-party packages. It relies exclusively on the Python standard library (e.g., math, re, collections).
  • [COMMAND_EXECUTION]: The Python scripts do not use subprocess, os.system, or other shell execution functions to interact with the host operating system.
  • [OBFUSCATION]: No obfuscated content, Base64-encoded commands, or hidden characters were detected in any of the files.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes external data such as user reviews and competitor info, the processing is limited to string analysis, regex matching, and statistical counting. The ingested data is not executed or interpreted as instructions by the agent.
  • [DYNAMIC_CONTEXT_INJECTION]: No use of the !command syntax was found in the SKILL.md or other documentation, preventing silent command execution during skill loading.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 07:12 AM