gpd-id-resolver
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for interacting with the Google Play Console via a CLI tool, creating a surface for potential injection through manipulated application identifiers.
- Ingestion points: Processes external data such as package names, track IDs, version codes, product SKUs, and email addresses (e.g., in
gpd permissions grants create). - Boundary markers: The skill does not provide explicit delimiters or instructions for the agent to treat these inputs as non-executable data when constructing commands.
- Capability inventory: The skill leverages the
gpdCLI to modify monetization settings, migrate prices, and grant developer permissions. - Sanitization: No sanitization or validation logic is defined for identifiers before they are passed to the shell.
- [COMMAND_EXECUTION]: The skill relies on the execution of the
gpdCLI tool to perform administrative actions on Google Play resources, including listing tracks, managing products, and creating permission grants.
Audit Metadata