app-store-connect-api
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/fetch_openapi_spec.ps1downloads the official App Store Connect OpenAPI specification fromdeveloper.apple.com. This is a trusted source used for legitimate development purposes. - [COMMAND_EXECUTION]: The skill includes a PowerShell script for analyzing the OpenAPI specification which performs standard file system operations for caching and network requests to Apple's infrastructure.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by fetching and displaying content from an external JSON file (OpenAPI specification). Ingestion point:
scripts/fetch_openapi_spec.ps1readsopenapi.oas.json. Boundary markers: Absent in script output. Capability inventory: Benign operations for documentation exploration. Sanitization: None. This surface is considered safe as the data is sourced from a well-known service.
Audit Metadata