asc-release-flow
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
ascCLI tool to perform App Store Connect operations. Security is managed through a 'dry-run' first approach, requiring explicit--confirmflags for mutations like staging metadata, uploading builds, and submitting for review. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local
./metadatadirectory and GeoJSON files to configure App Store releases. While this presents a surface for indirect prompt injection, the instructions treat these files as structured data for API submission rather than as a source of executable instructions for the agent. - [CREDENTIALS_SAFE]: Authentication is handled via standard mechanisms, including
asc auth loginorASC_*environment variables. No hardcoded secrets or unsafe credential handling practices were observed.
Audit Metadata