gps-listings
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell command templates for the 'gps' utility to interact with the Google Play Store API. These commands are used for listing, retrieving, and updating application metadata and graphical assets.
- [PROMPT_INJECTION]: The skill interacts with external data by fetching store listing content, creating a potential surface for indirect prompt injection.
- Ingestion points: Data is ingested via 'gps listings get' and 'gps_list_images' functions.
- Boundary markers: The instructions do not define specific delimiters for separating fetched store content from agent instructions.
- Capability inventory: The skill provides capabilities to update store metadata and delete/upload images using the 'gps' tool.
- Sanitization: No specific sanitization or validation of the fetched metadata is performed before display or processing.
Audit Metadata