app-store-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the Apple App Store, including user-generated reviews and app descriptions.
- Ingestion points: Data enters the agent context via
itunes.apple.comandapps.apple.comendpoints (e.g., inendpoints/reviews.mdandendpoints/app-lookup.md). - Boundary markers: The provided examples do not use delimiters or explicit instructions to ignore embedded commands within the scraped JSON/HTML content.
- Capability inventory: The skill utilizes shell commands like
curl,jq,grep, andsedto process data, providing a functional path for further actions based on scraped content. - Sanitization: No evidence of sanitization or filtering of external content (like review text) is present in the provided command-line examples.
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to fetch App Store data.
- Evidence: Multiple files (e.g.,
endpoints/search.md,endpoints/lists.md) usecurlto reachitunes.apple.comandsearch.itunes.apple.com. These are official Apple domains and well-known services, which are documented here neutrally. - [COMMAND_EXECUTION]: The skill relies heavily on executing shell commands for its primary function.
- Evidence: Examples throughout the skill use
curl,jq,grep,sort,head, andtrto retrieve and format data. While these are intended for legitimate scraping, they represent the skill's operational capabilities.
Audit Metadata