asc-testflight-orchestration
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the 'asc' CLI tool to perform App Store Connect operations. This includes exporting configurations, managing groups and testers, and distributing builds. Use of the CLI is the primary intended purpose of the skill.
- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it involves reading data from App Store Connect environments and writing user-supplied text to build notes.
- Ingestion points: Output from 'asc testflight config export' and list commands.
- Boundary markers: No delimiters or specific 'ignore instructions' warnings are provided for external data.
- Capability inventory: Command execution via the 'asc' CLI tool.
- Sanitization: No explicit sanitization or validation of external content is described in the instructions.
Audit Metadata