app-store-subscriptions
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The launcher script scripts/asc.mjs is designed to download the appstore-release CLI from the author's GitHub repository (https://github.com/beydemirfurkan/appstore-release.git) if it is not already present locally. It then executes the CLI using node. This mechanism ensures that the version of the CLI tool matches the instructions provided in the skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided configuration, such as product IDs, display names, and descriptions, which are then used as parameters for the App Store Connect API.\n
- Ingestion points: User instructions and subscription configuration objects in JSON.\n
- Boundary markers: No specific delimiters are used to wrap user-provided strings in the provided skill instructions.\n
- Capability inventory: The skill can execute the appstore-release CLI tool and make network requests to api.appstoreconnect.apple.com.\n
- Sanitization: The launcher script does not perform sanitization of user-provided strings; it relies on the underlying CLI and the App Store Connect API's own validation and constraints.
Audit Metadata