app-store
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains well-documented instructions and templates for App Store management. All external links target legitimate developer resources or well-known services (Apple, MobileAction, AppTweak, AppFigures).
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to ingest and process user-provided app metadata (names, descriptions, and feature lists), it functions as a text-generation advisor. There is no evidence of untrusted data being interpolated into dangerous execution sinks or shell commands. The capabilities are scoped to standard file operations and web search for ASO research.
- [COMMAND_EXECUTION]: The documentation mentions developer tools like
nmandotoolfor binary analysis, but these are provided as instructions for the human developer to use locally. The skill does not attempt to execute these commands autonomously, and they are not included in theallowed-toolsconfiguration.
Audit Metadata