app-store-preflight-skills
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a preflight checklist and audit tool for developers preparing apps for the Apple App Store. The provided guidelines and rules are derived from official Apple documentation and community best practices.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local search and inspection commands using
grep,find,ffmpeg, andplutil. These commands are used to identify specific rejection patterns within the user's project files and metadata. - [EXTERNAL_DOWNLOADS]: The skill recommends the use of the
ascCLI tool, which is an established open-source project for interacting with App Store Connect. It suggests installation via Homebrew, a well-known and trusted package manager. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata and source code during its auditing phase. While this provides a potential surface for indirect prompt injection, the threat is mitigated by the deterministic nature of the search commands and the primary focus on identifying static patterns rather than interpreting arbitrary instructions from the data.
Audit Metadata