asc-cli
Warn
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a binary executable from a third-party GitHub repository ('rorkai/App-Store-Connect-CLI') which is not an official source for the service.\n- [REMOTE_CODE_EXECUTION]: It sets execution permissions ('chmod +x') on a downloaded binary and executes it, allowing external code to run on the system.\n- [COMMAND_EXECUTION]: The skill uses shell commands to install tools, manage sensitive authentication files ('.p8'), and perform operations via the 'asc' CLI.\n- [PROMPT_INJECTION]: The skill processes untrusted external data such as user reviews and crash logs, which creates a surface for indirect prompt injection.\n
- Ingestion points: The skill fetches data using 'asc reviews list' and 'asc testflight crashes log'.\n
- Boundary markers: There are no instructions to the agent to treat these external inputs as untrusted or to ignore any embedded commands.\n
- Capability inventory: The skill can execute shell commands and interact with the local file system.\n
- Sanitization: No sanitization or validation of the fetched data is performed before it is handled by the agent.
Audit Metadata