aso-audit
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, specifically app titles, descriptions, and user reviews from the Apple App Store and Google Play Store via WebFetch. This creates an indirect prompt injection surface where malicious instructions embedded in those listings could attempt to influence the agent's analysis or behavior.
- Ingestion points: Public listing pages on apps.apple.com and play.google.com are fetched as described in Phase 1 of SKILL.md.
- Boundary markers: The instructions lack explicit boundary markers or directives for the agent to treat fetched listing text as untrusted data or to ignore embedded commands.
- Capability inventory: The skill's capabilities are limited to data analysis and report generation; it does not involve arbitrary command execution, network exfiltration of local data, or persistent filesystem modifications.
- Sanitization: There is no evidence of input validation or content sanitization for the data retrieved from external stores.
Audit Metadata