apple-app-store-search
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bash script (
scripts/search_apple_app_store.sh) which uses standard tools likecurlandpython3for network communication and data processing. All arguments are validated or handled through environment variables to prevent injection. - [EXTERNAL_DOWNLOADS]: The script communicates with
ai-factory.frevana.comto perform searches. This domain belongs to the skill's author (FinpeakInc / Frevana) and is used for its primary function. - [DATA_EXFILTRATION]: While the skill uses an
Authorization: Bearertoken and makes network requests, it does so to the vendor's own API. It does not access sensitive local files (like SSH keys or AWS credentials) and only sends user-provided search parameters to the service. - [CREDENTIALS_UNSAFE]: The skill properly instructs the agent to use the
FREVANA_TOKENenvironment variable and warns against echoing the token back to the user. No hardcoded secrets were found.
Audit Metadata