app-store-optimization-v2
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, such as user reviews and competitor app descriptions, which are ingested through functions in
review_analyzer.pyandcompetitor_analyzer.py. - Ingestion points: User-provided review texts and metadata fields are processed in
review_analyzer.pyandcompetitor_analyzer.pyto perform sentiment analysis and theme extraction. - Boundary markers: No specific delimiters or safety instructions are used to wrap the ingested content within the scripts.
- Capability inventory: The included scripts do not utilize subprocess calls, network operations, or file-writing capabilities, strictly using the Python standard library for data analysis and statistical calculations.
- Sanitization: Basic regex-based text cleaning is applied to text for analysis purposes (NLP), but no security-specific sanitization is performed on the input data.
Audit Metadata