gplay-team
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gplayCLI to interact with Google Play Developer account settings. It provides instructions for managing account-wide memberships (gplay team users) and per-app access grants (gplay team grants). - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided data such as email addresses and package names (
com.example.app) as arguments for CLI commands. While this presents an attack surface where malicious input could be passed to the underlying tool, the skill's structure is standard for administrative CLI helpers. - [SAFE]: The skill is designed for administrative tasks and includes security-conscious features like requiring a
--confirmflag for destructive actions (removing members) and a mandatory--grant-adminflag when conferring administrative privileges, which prevents accidental privilege escalation.
Audit Metadata