gpc-app-recovery
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses standard command-line operations for Google Play Console management and adheres to safety-first principles by requiring user confirmation for deployment and cancellation actions. All identified external resources trace back to the vendor's intended functionality for the gpc tool.
- [INDIRECT_PROMPT_INJECTION]: The skill handles external data files (recovery.json and targeting.json) which are used to configure recovery actions.
- Ingestion points: The gpc recovery create and gpc recovery add-targeting commands read local JSON files.
- Boundary markers: No explicit delimiters are specified for when the agent displays the action details to the user.
- Capability inventory: The skill has the capability to execute shell commands via the gpc CLI tool.
- Sanitization: The skill relies on the underlying CLI tool for input validation.
Audit Metadata