gpc-metadata-sync
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a command-line interface wrapper for the gpc tool. It handles local metadata and image files to synchronize them with the Google Play Store.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the gpc utility. This is the intended primary function of the skill and does not involve elevated privileges or dangerous execution patterns.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests data from local directories (./metadata and ./screenshots), the risk is minimal as the data is used for store listing synchronization and no instructions are provided to the agent to interpret the content of these files as commands.
Audit Metadata