gplay-vitals
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to ingest untrusted data from the Google Play Developer Reporting API.
- Ingestion points: The
gplay vitals errors reportscommand retrieves stack traces and error reports from external sources (SKILL.md). - Boundary markers: The instructions lack explicit delimiters or guidance for the agent to ignore instructions that might be embedded within the retrieved data.
- Capability inventory: The skill allows the agent to execute CLI commands and process their output.
- Sanitization: No sanitization or validation steps are described for the external content before it is processed by the agent.
Audit Metadata