aso-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content by fetching App Store and Google Play listing data via the WebFetch tool. This content could potentially contain malicious instructions designed to influence the agent's behavior during the audit process.
- Ingestion points: Listing data retrieved from App Store (apps.apple.com) and Google Play (play.google.com) URLs as described in SKILL.md (Phase 1).
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified when processing the fetched content.
- Capability inventory: The skill uses WebFetch and screenshot tools to gather data and generates a text-based report; it does not demonstrate capabilities for arbitrary command execution, file-writing, or network requests to non-store domains.
- Sanitization: The instructions do not specify any sanitization, filtering, or validation steps for the metadata retrieved from the store pages before it is analyzed.
Audit Metadata