asc-subscription-localization
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard operational instructions for the
ascCLI tool to manage App Store localizations. It follows legitimate API workflows and uses standard environment variables for authentication. - [COMMAND_EXECUTION]: The skill instructs the agent to execute
ascCLI commands to interact with App Store Connect. These commands are consistent with the skill's stated purpose of localizing subscription data and do not include high-risk system commands or privilege escalation attempts. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text for 'Display Name' and 'Description' fields. While these are untrusted data points, they are only used as arguments for CLI calls to the official App Store Connect API. There is no evidence of these strings being used in a way that could lead to unauthorized command execution or data exfiltration.
Audit Metadata