google-play
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill interacts exclusively with
https://googleplay.fetcher.sh, which is an official domain associated with the vendorfetcher-sh. All network operations are directed to the vendor's own infrastructure.- [SAFE]: Credentials are managed securely. The skill provides instructions for using an environment variable (FETCHER_API_KEY) and utilizes placeholders for API keys, avoiding the exposure of actual secrets.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by design, as its primary function is to ingest and process untrusted external data from the Google Play Store. - Ingestion points: Data is pulled into the agent context from multiple API endpoints (e.g., reviews, app details, developer catalogs) at
googleplay.fetcher.sh. - Boundary markers: Absent. The skill does not instruct the agent to use specific delimiters or to treat the retrieved API responses as potentially untrusted data.
- Capability inventory: The skill enables network access to fetch external data and presents it to the agent for analysis (e.g., sentiment analysis of reviews).
- Sanitization: No evidence of sanitization, filtering, or escaping of the fetched content is provided in the instructions.
Audit Metadata