featuring-nomination

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns detected. The skill uses tools associated with the vendor 'asodevapp' for legitimate app management and editorial drafting tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes external project context and nomination data.
  • Ingestion points: Data retrieved via get_nomination_data and external project context referenced in SKILL.md.
  • Boundary markers: None present to distinguish untrusted data from instructions.
  • Capability inventory: Tools such as fill_nomination allow writing data back to the App Store Connect environment.
  • Sanitization: No explicit content sanitization or validation of the input strings is specified beyond the defined field length constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 06:32 PM