aso-audit
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources, specifically app store metadata and user reviews.
- Ingestion points: Processes external app metadata and user reviews fetched via the 'Appeeky' tool or API, as well as the local context file
app-marketing-context.md. - Boundary markers: The skill lacks explicit delimiters or instructions for the agent to ignore potentially malicious embedded instructions within the fetched external data.
- Capability inventory: The skill's capabilities are limited to text-based analysis, scoring, and providing optimization recommendations; it does not have access to shell commands, sensitive files, or network exfiltration tools.
- Sanitization: No validation or sanitization of the fetched external content is defined in the instructions before processing.
Audit Metadata