collecting-testflight-feedback
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted feedback text from App Store Connect, which is submitted by external beta testers. Maliciously crafted feedback could attempt to influence the agent's behavior during the reporting process.
- Ingestion points: App Store Connect TestFlight feedback pages (SKILL.md, Step 4).
- Boundary markers: Absent; feedback text is placed directly into the report template.
- Capability inventory: Shell command execution (mkdir, curl, date) and local file writing.
- Sanitization: No sanitization of the ingested feedback text is performed.
- [EXTERNAL_DOWNLOADS]: Downloads tester screenshots from Apple's official feedback domain (tf-feedback.itunes.apple.com) using curl. This is a legitimate functional requirement for generating feedback reports.
- [COMMAND_EXECUTION]: Utilizes shell commands (mkdir, date, curl) to create directory structures, generate timestamps for filenames, and retrieve image assets.
Audit Metadata