asc-rejection
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/asc.mjsscript is designed to download theappstore-releaseCLI tool from a remote repository (https://github.com/beydemirfurkan/appstore-release.git) usinggit cloneif the tool is not already present on the local system. - [REMOTE_CODE_EXECUTION]: After downloading the repository, the skill executes the code found within
src/cli.mjsusing the Node.js runtime to perform App Store Connect operations. - [COMMAND_EXECUTION]: The skill uses
node:child_process(spawnSync) to execute both thegitcommand for cloning and the downloaded JavaScript CLI for operational tasks. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and process App Store rejection messages provided by the user to determine the appropriate course of action.
- Ingestion points: The agent is prompted to ask the user to paste the full rejection message from App Store Connect (SKILL.md, Step 2).
- Boundary markers: None; there are no specific delimiters or instructions to ignore potential commands embedded within the pasted text.
- Capability inventory: The skill has the ability to submit builds, modify app metadata, and interact with the App Store Connect API.
- Sanitization: The skill lacks logic to sanitize or validate the external rejection text before the agent interprets it.
Audit Metadata