The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous command templates for the asc CLI tool to list, create, and update localizations for subscriptions and in-app purchases. This is the primary mechanism for the skill's intended functionality.
[DATA_EXFILTRATION]: The instructions require the use of sensitive App Store Connect credentials, specifically through the asc auth login command or ASC_* environment variables (such as ASC_APP_ID). While these are standard for App Store management, they involve handling high-privilege platform access.
[PROMPT_INJECTION]: Potential for indirect prompt injection or command injection exists through the interpolation of user-provided 'Display Name' and 'Description' strings into shell commands.
Ingestion points: User-provided text for subscription names and descriptions.
Boundary markers: None; the skill uses direct interpolation in example commands (e.g., --name "Display Name").
Capability inventory: Multiple shell execution points via the asc utility across various workflows (SKILL.md).
Sanitization: No explicit instructions are provided for the agent to sanitize or escape user-provided strings before executing the shell commands.

asc-subscription-localization