apple-ads
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could potentially contain malicious instructions designed to influence the agent's behavior during automated analysis or keyword creation.
- Ingestion points: The skill ingests search terms from the Apple Search Ads API (
asa search-terms list) and competitor keyword data from Market Intelligence (asa competitors summary), as documented inreferences/playbooks/search-term-harvesting.mdandreferences/playbooks/keyword-opportunity.md. - Boundary markers: Every write operation requires an explicit mutation proposal and a human-in-the-loop confirmation (
requires_confirmation: true), as defined in the Analysis and Proposal Contract inSKILL.md. - Capability inventory: The skill possesses capabilities to modify account state, including adding keywords (
asa keywords add), updating bids (asa keywords update), and managing negative keywords (asa negative-keywords add), primarily handled inreferences/asa-management.md. - Sanitization: External strings are normalized using Unicode normalization, trimmed of whitespace, and lowercased before comparison to prevent schema confusion and basic injection attempts, as specified in
references/playbooks/keyword-opportunity.md. - [COMMAND_EXECUTION]: The skill executes shell commands via the
adaptyCLI to interact with Apple Search Ads services. - Evidence: The preflight script in
SKILL.mdexecutesadapty asa whoamito verify connectivity and credentials. - Context: This is the primary intended purpose of the skill. The script includes diagnostic logic to handle specific sandbox certificate errors by conditionally setting
NODE_USE_SYSTEM_CA=0. It explicitly forbids the use ofsudoand provides clear error routing for authentication and network issues.
Audit Metadata