skills/asodevapp/skills/android-aso/Snyk

android-aso

Warn

Audited by Snyk on Jul 2, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.65). The required runtime workflow uses app-store-connect-mcp to call get_google_editor_data and then drafts/validates googleMetadata; this ingests Google Play/Play Console listing text (outsider-authored store listing content) into the agent’s LLM context via the MCP tool outputs.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 2, 2026, 06:32 PM

Issues

1