competitor-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a domain-specific command-line tool named aso to analyze keywords and app metadata. These operations are local to the user's environment and typical for developer-focused utility skills.
  • [EXTERNAL_DOWNLOADS]: The skill performs authenticated API calls to asomaniac.com using curl. This is used to retrieve competitor overlap data directly from the vendor's web service. The use of an environment variable (ASO_MANIAC_API_KEY) for authentication follows security best practices for credential management.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from the asomaniac.com API and user-supplied application identifiers. While this data is interpolated into subsequent analysis steps and CLI commands, the workflow is focused on structured ASO metrics (popularity, difficulty, rank) which limits the risk of adversarial instruction execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 09:03 AM