asc-submission-health
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external sources, including App Store Connect API responses and local metadata files, which presents an attack surface for indirect prompt injection.
- Ingestion points: Metadata and privacy settings are imported via
asc metadata pullandasc web privacy pullas described inreferences/readiness-repairs.mdandreferences/app-privacy.md. - Boundary markers: The instructions specify safety steps such as "Review the planned change before writing" and using
--dry-runduring metadata updates. - Capability inventory: The skill can modify app metadata, digital goods configurations, and submission states (e.g.,
asc submit cancel). - Sanitization: The skill depends on built-in tool validation and human-in-the-loop review of diffs and plans.
- [COMMAND_EXECUTION]: The skill uses the
ascCLI to perform privileged operations on App Store resources, including managing encryption declarations, age ratings, and in-app purchase versions.
Audit Metadata