gplay-reviews

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-generated content from Google Play Store reviews, which is a known vector for indirect prompt injection. Ingestion points: The skill fetches reviews via gplay reviews list, view, and history (SKILL.md). Boundary markers: The documentation explicitly instructs the agent to 'quote or summarize' content and treat reviews as data. Capability inventory: The agent can perform public writes using gplay reviews reply. Sanitization: The skill recommends using --dry-run for manual operator review of drafted replies.
  • [COMMAND_EXECUTION]: The skill executes the gplay CLI tool to perform its operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:48 AM