asc-ppp-pricing
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for importing data from external CSV files, which is a potential surface for indirect prompt injection if the source file is malicious.
- Ingestion points: The
--inputparameter inasc subscriptions pricing prices importcommands withinSKILL.md. - Boundary markers: The instructions do not define specific delimiters or safety warnings for the data content within the CSV.
- Capability inventory: The skill utilizes the
ascCLI to perform network operations and modify App Store metadata and pricing. - Sanitization: The documentation recommends using the
--dry-runflag to validate inputs before application, which acts as a manual verification step. - [SAFE]: Authentication is managed through standard environment variables (
ASC_AUTH_LOGIN,ASC_*) and login commands, following established secret management practices. - [SAFE]: All command examples use standard, non-obfuscated shell syntax for administrative tasks.
- [SAFE]: The use of pagination markers like
--nextcontinuation tokens follows standard REST API patterns for the intended service.
Audit Metadata