gplay-compliance
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running the
gplayCLI tool to interact with Google Play APIs. It correctly specifies the use of flags like--dry-runfor rehearsals and--confirmfor actual updates, minimizing the risk of accidental deployment. - [INDIRECT_PROMPT_INJECTION]: The skill involves processing a versioned CSV file.
- Ingestion points: Data is ingested from
./compliance/data-safety.csv. - Boundary markers: None are explicitly mentioned in the instructions.
- Capability inventory: The skill uses shell commands to interact with the
gplayutility. - Sanitization: Structural validation is handled by the tool's
validatecommand before any data is sent to the network.
Audit Metadata