asc-screenshot-resize

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the macOS sips tool for image processing and metadata inspection, and a CLI tool named asc for interacting with App Store Connect services.
  • [COMMAND_EXECUTION]: A Python one-liner is provided to batch rename files, specifically targeting the removal of the Unicode Narrow No-Break Space (\u202f) character from filenames to prevent CLI compatibility issues.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external filenames which can be untrusted input.
  • Ingestion points: The Python script in Step 1 reads all filenames in the current directory using os.listdir('.').
  • Boundary markers: No specific delimiters or warnings for embedded instructions in filenames are present.
  • Capability inventory: The skill possesses capabilities to rename files (os.rename), modify image metadata via sips, and upload data to App Store Connect via asc.
  • Sanitization: The script performs a specific sanitization by replacing the \u202f character with a standard space, though this is for functional rather than security purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 02:33 PM