aso-optimize

Warn

Audited by Snyk on May 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). This skill's workflow explicitly ingests public App Store content (via "iTunes Search Top-200" and App Store Connect APIs called by scripts such as python3 scripts/aso_optimize_v2.py analyze which produce data/phase_a_.json and data/phase_b_.json) and requires the LLM to read and act on that external metadata to make optimization decisions, exposing the agent to untrusted third-party web content that can influence actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 20, 2026, 06:54 AM
Issues
1