app-store-opportunity-research
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists exclusively of markdown-based instructions and documentation. It does not include any executable scripts, shell commands, or third-party software dependencies.
- [SAFE]: External network activity is limited to manual browser-based research on well-known platforms (Apple App Store, Google Trends, Reddit, Product Hunt) for the purpose of data gathering. The URLs provided are standard and do not involve typosquatting or malicious redirects.
- [SAFE]: The skill does not request or access sensitive local system files, environment variables, or authentication credentials. All data processed is public market information.
- [INDIRECT_PROMPT_INJECTION]: The skill functions by ingesting untrusted data from external websites, such as user reviews and forum posts, which is a common surface for indirect injection. However, the risk is assessed as safe because the skill's capabilities are limited to producing text-based reports and markdown files, lacking any dangerous execution environment.
- Ingestion points: App Store chart listings, user reviews, Reddit threads, and Google Trends data (documented in SKILL.md and references/research-sources.md).
- Boundary markers: None present in the prompt templates.
- Capability inventory: Browser-based research and local markdown file creation (PRD-*.md).
- Sanitization: None present in the instructions.
Audit Metadata