asc-ppp-pricing

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for importing data from external CSV files, which is a potential surface for indirect prompt injection if the source file is malicious.
  • Ingestion points: The --input parameter in asc subscriptions pricing prices import commands within SKILL.md.
  • Boundary markers: The instructions do not define specific delimiters or safety warnings for the data content within the CSV.
  • Capability inventory: The skill utilizes the asc CLI to perform network operations and modify App Store metadata and pricing.
  • Sanitization: The documentation recommends using the --dry-run flag to validate inputs before application, which acts as a manual verification step.
  • [SAFE]: Authentication is managed through standard environment variables (ASC_AUTH_LOGIN, ASC_*) and login commands, following established secret management practices.
  • [SAFE]: All command examples use standard, non-obfuscated shell syntax for administrative tasks.
  • [SAFE]: The use of pagination markers like --next continuation tokens follows standard REST API patterns for the intended service.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 02:33 PM