app-store-connect-cli
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains an installation command that downloads a script from 'https://asccli.sh/install' and pipes it directly to 'bash'. This domain is the official site for the CLI tool described in the skill, and while this is a common installation pattern, it involves executing remote code locally.
- [COMMAND_EXECUTION]: The skill relies on the execution of various CLI commands ('asc ...') to interact with Apple's App Store Connect API, covering operations such as build uploads, metadata synchronization, and authentication profile management.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (API responses and local metadata files), which creates an attack surface for indirect prompt injection.
- Ingestion points: Retrieves metadata from local directories ('asc metadata apply') and fetches application or build data from the App Store Connect API ('asc apps list', 'asc builds list') as described in 'SKILL.md'.
- Boundary markers: There are no explicit delimiters or specific warnings provided to the agent to help it differentiate between data and instructions within these inputs.
- Capability inventory: The skill can perform network operations, file system modifications, and execute shell commands within 'SKILL.md'.
- Sanitization: Beyond a specific keyword auditing feature, there is no evidence of general validation or sanitization for external content before it is processed.
Recommendations
- HIGH: Downloads and executes remote code from: https://asccli.sh/install - DO NOT USE without thorough review
Audit Metadata