asc-whats-new-writer
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from git logs and user-provided text, creating a surface for potential instruction injection through commit messages or descriptions.\n
- Ingestion points: SKILL.md defines modes for gathering input from Git Log, Bullet Points, and Free Text.\n
- Boundary markers: Absent; there are no instructions or delimiters to isolate untrusted data from the agent's instructions.\n
- Capability inventory: The skill utilizes shell commands via git and the asc CLI.\n
- Sanitization: Absent; the skill does not specify any validation or sanitization for the input data before processing it.\n- [COMMAND_EXECUTION]: The skill relies on shell commands to interact with local repositories and App Store Connect services.\n
- Evidence: The skill uses
git describe,git log, and variousascCLI commands likeasc apps info editandasc metadata pushto retrieve and update metadata, which is consistent with its primary purpose but represents a privilege surface.
Audit Metadata