gps-reviews
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses the gps CLI tool to manage Google Play Store reviews, which is consistent with its stated purpose. Authentication checks using whoami and tracks list are standard administrative practices.
- [PROMPT_INJECTION]: The skill processes untrusted user-generated content (store reviews). While this provides a surface for indirect prompt injection, the skill mitigates potential risks by mandating user approval for all outgoing replies. * Ingestion points: Google Play reviews are retrieved via gps reviews list and gps reviews get (SKILL.md). * Boundary markers: No specific delimiters are used to isolate review content. * Capability inventory: The agent can execute replies using gps reviews reply. * Sanitization: No content filtering or sanitization is specified.
Audit Metadata