asc-subscription-localization
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various
ascCLI commands to list, create, and update App Store Connect resources. These commands are standard for interacting with the service. - [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it processes data from external command outputs to determine future actions. 1. Ingestion points: Metadata and IDs retrieved via
asclist commands. 2. Boundary markers: Absent. 3. Capability inventory: The skill can execute create and update commands viaasc. 4. Sanitization: Absent. - [SAFE]: The skill follows secure practices for credential management by recommending the use of environment variables or official authentication commands instead of hardcoding secrets.
Audit Metadata