aso-audit
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands, specifically
fastlaneand a specializedasoCLI tool, to download app metadata and perform keyword analysis. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and evaluates data from external app listings, which presents a potential surface for indirect prompt injection attacks if the metadata contains adversarial content. 1. Ingestion points: App metadata retrieved via
fastlane deliver download_metadatain SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution viafastlaneandasoin SKILL.md. 4. Sanitization: Absent.
Audit Metadata