The Agent Skills Directory

[SAFE]: The skill is focused on auditing App Store Optimization (ASO) metadata. It retrieves public information from well-known, trusted domains (apps.apple.com and play.google.com) using standard web-fetching tools.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data, specifically app descriptions and reviews from store listings. While this represents a theoretical indirect prompt injection surface, the risk is mitigated because the skill's capabilities are limited to generating text-based analysis and reports. It lacks the ability to execute shell commands, write files, or perform network operations to non-whitelisted domains, ensuring that any malicious instructions in the scraped content cannot cause harm to the host system.
[EXTERNAL_DOWNLOADS]: The skill fetches data from trusted organizations and well-known services (Apple and Google). These operations are core to the skill's primary purpose and do not involve downloading or executing arbitrary scripts or binaries.

suede-aso