gps-purchases

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security risks were identified. The skill defines the usage of a command-line tool for managing Google Play Store purchases, which is consistent with its stated purpose.- [COMMAND_EXECUTION]: The skill documents the use of a CLI tool named gps to perform operations like refunding orders and canceling subscriptions. The usage of variables like $PKG, PRODUCT_ID, and TOKEN is a standard pattern for CLI tool interaction and does not represent a malicious execution pattern.- [PROMPT_INJECTION]: The skill includes explicit safety instructions for the agent, requiring user confirmation for sensitive actions such as refund, revoke, or cancel. This aligns with security best practices for tools with the capability to modify sensitive data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 03:34 PM
Security Audit — agent-trust-hub — gps-purchases