aso-optimize
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill's workflow explicitly ingests public App Store content (via "iTunes Search Top-200" and App Store Connect APIs called by scripts such as python3 scripts/aso_optimize_v2.py analyze which produce data/phase_a_.json and data/phase_b_.json) and requires the LLM to read and act on that external metadata to make optimization decisions, exposing the agent to untrusted third-party web content that can influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata