ios-app-store-competitor-research
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources and presents it to the agent for analysis, creating a surface for indirect prompt injection.
- Ingestion points: The
scripts/scrape_app_store.pyscript fetches app descriptions and release notes from external Apple App Store and iTunes API URLs. - Boundary markers: The skill lacks explicit delimiters or instructions to the agent to disregard instructions embedded within the scraped app metadata.
- Capability inventory: The skill is capable of performing network requests to download content and writing files (JSON, Markdown, and images) to the local file system.
- Sanitization: The script does not perform sanitization or filtering of the extracted text content before including it in the final Markdown report for the agent.
Audit Metadata