gpd-cli-usage
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to help the agent construct and execute shell commands based on user requests. This creates an interface where unsanitized user input (such as package names or version strings) could potentially be used to inject additional command flags or arguments.
- Ingestion points: User requests for Play Console workflows such as publishing or monetization (SKILL.md).
- Boundary markers: The skill does not define specific delimiters to separate user data from command templates.
- Capability inventory: The agent is authorized to execute
gpdCLI commands, which can perform destructive actions on the Play Console. - Sanitization: No explicit instructions are provided for the agent to sanitize or validate user-provided parameters before incorporating them into shell commands.
Audit Metadata