asc-screenshot-resize
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the macOS
sipstool for image processing and metadata inspection, and a CLI tool namedascfor interacting with App Store Connect services. - [COMMAND_EXECUTION]: A Python one-liner is provided to batch rename files, specifically targeting the removal of the Unicode Narrow No-Break Space (
\u202f) character from filenames to prevent CLI compatibility issues. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external filenames which can be untrusted input.
- Ingestion points: The Python script in Step 1 reads all filenames in the current directory using
os.listdir('.'). - Boundary markers: No specific delimiters or warnings for embedded instructions in filenames are present.
- Capability inventory: The skill possesses capabilities to rename files (
os.rename), modify image metadata viasips, and upload data to App Store Connect viaasc. - Sanitization: The script performs a specific sanitization by replacing the
\u202fcharacter with a standard space, though this is for functional rather than security purposes.
Audit Metadata