gpc-team-access
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the gpc command-line utility to interact with the Google Play Console API. It provides commands for listing, granting, and revoking user permissions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as package names and user email addresses. While this presents a surface for indirect prompt injection, the instructions include safety checks like listing users before modifications and requiring user confirmation for revocations.
- Ingestion points: User-provided package names and email addresses in shell commands (SKILL.md).
- Boundary markers: None explicitly defined.
- Capability inventory: Execution of gpc commands (SKILL.md).
- Sanitization: Not explicitly implemented in the skill instructions.
Audit Metadata