asc-in-app-events
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
asccommand-line interface to perform operations such as listing events (asc app-events list), creating localizations (asc app-events localizations create), and submitting reviews (asc app-events submit). These are standard operational commands for managing App Store assets. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and parse JSON output from CLI commands. This constitutes an indirect prompt injection surface where the agent processes external data, though the risk is minimal as the data originates from authenticated App Store Connect API responses.
- [EXTERNAL_DOWNLOADS]: The skill references official Apple documentation for media specifications and submission guidance. These references are to trusted official domains and do not involve executable code downloads.
Audit Metadata