The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the appstore-release CLI tool from the author's GitHub repository if it is not found locally.
Evidence: The scripts/asc.mjs file contains logic to clone https://github.com/beydemirfurkan/appstore-release.git into the user's cache directory.
[REMOTE_CODE_EXECUTION]: The skill executes the downloaded CLI tool using the Node.js runtime.
Evidence: scripts/asc.mjs uses spawnSync to execute the src/cli.mjs file from the downloaded repository.
[COMMAND_EXECUTION]: The skill runs shell commands to fetch and execute its dependencies.
Evidence: The script invokes git clone to retrieve the source code and node to run the resulting script.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text for app metadata, which is then transmitted to Apple's servers.
Ingestion points: User-defined strings for whatToTest and description in the configuration.
Boundary markers: Data is encapsulated within JSON structures.
Capability inventory: Network access to api.appstoreconnect.apple.com and file system access for configuration.
Sanitization: Data validation is expected to be performed by the CLI tool before API submission.

asc-testflight