gps-ops
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill establishes an indirect prompt injection surface by instructing the agent to interpolate user-provided data directly into shell command templates.
- Ingestion points: Untrusted data enters the context through the
$PKGenvironment variable and JSON argument strings used in thegps callexamples withinSKILL.md. - Boundary markers: There are no boundary markers or explicit instructions provided to the agent to validate or sanitize these inputs to prevent command injection or instruction override.
- Capability inventory: The
gpsCLI tool provides capabilities to read from and write to the Google Play Store (e.g., listing reviews, managing tracks, and replying to reviews). - Sanitization: No sanitization, escaping, or schema validation logic is defined for the external content before it is processed by the CLI.
Audit Metadata