localization
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the App Store and perform keyword research. It executes fastlane deliver download_metadata and fastlane deliver to sync app information. It also utilizes the aso CLI tool, which is a resource associated with the skill vendor, for keyword recommendations and batch processing.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of app metadata files, creating a surface for potential instruction injection. 1. Ingestion points: Reads metadata files from the fastlane/metadata/ directory. 2. Boundary markers: Absent. 3. Capability inventory: Command execution via fastlane and aso tools. 4. Sanitization: No specific validation or sanitization of metadata content is mentioned.
Audit Metadata