asc-cli-usage
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional documentation for the
ascCLI tool. The commands and workflows described (such asasc search,asc view, andasc schema) are standard for interacting with App Store Connect APIs. - [CREDENTIALS_UNSAFE]: The skill references authentication environment variables such as
ASC_KEY_IDandASC_PRIVATE_KEY_PATH. These are listed as configuration options for the tool rather than hardcoded secrets. It also documents how to generate API keys securely to a local directory. - [COMMAND_EXECUTION]: The skill documents various CLI commands for managing App Store resources. These are intended for legitimate developer use and do not contain malicious patterns or unauthorized privilege escalation attempts.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a capability surface by teaching the agent how to construct and execute CLI commands. However, it does not ingest untrusted external data within its own instructions, and the documented patterns (like requiring
--confirmfor destructive operations) align with safety best practices.
Audit Metadata