app-store-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill provides a professional ASO toolset that follows security best practices. All external data fetching is directed towards official and well-known services like the iTunes Search API.\n- [NO_CODE]: The provided skill package contains documentation and definition files but does not include the functional Python scripts (e.g., keyword_analyzer.py) described in the documentation. The analysis is based on the provided text and intended logic.\n- [INDIRECT_PROMPT_INJECTION]: The skill's review analysis feature creates an ingestion surface for untrusted data from app stores.\n
- Ingestion points: User review text processed by the review analysis module (review_analyzer.py).\n
- Boundary markers: None explicitly defined in the provided documentation for the processing of external strings.\n
- Capability inventory: Analysis is limited to sentiment tracking, theme extraction, and generating response templates; the skill lacks capabilities for command execution or sensitive file access that could be abused via prompt injection.\n
- Sanitization: The resulting output is primarily intended for human consumption in the form of developer templates and reports.
Audit Metadata