asc-rejection

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/asc.mjs script is designed to download the appstore-release CLI tool from a remote repository (https://github.com/beydemirfurkan/appstore-release.git) using git clone if the tool is not already present on the local system.
  • [REMOTE_CODE_EXECUTION]: After downloading the repository, the skill executes the code found within src/cli.mjs using the Node.js runtime to perform App Store Connect operations.
  • [COMMAND_EXECUTION]: The skill uses node:child_process (spawnSync) to execute both the git command for cloning and the downloaded JavaScript CLI for operational tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and process App Store rejection messages provided by the user to determine the appropriate course of action.
  • Ingestion points: The agent is prompted to ask the user to paste the full rejection message from App Store Connect (SKILL.md, Step 2).
  • Boundary markers: None; there are no specific delimiters or instructions to ignore potential commands embedded within the pasted text.
  • Capability inventory: The skill has the ability to submit builds, modify app metadata, and interact with the App Store Connect API.
  • Sanitization: The skill lacks logic to sanitize or validate the external rejection text before the agent interprets it.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 03:33 PM