gplay-ppp-pricing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages the
gplayCLI to perform administrative tasks on Google Play Store products. This includes authentication, data retrieval, and modification of pricing configurations using standard CLI commands. - [INDIRECT_PROMPT_INJECTION]: The workflow involves fetching current product state from an external API and using that data to construct update requests. This creates a surface where instructions embedded in product metadata could potentially influence the agent's behavior.
- Ingestion points: Product data retrieved via
gplay iap get,gplay onetimeproducts get, andgplay subscriptions getinSKILL.md. - Boundary markers: No explicit delimiters are used to separate external content from agent instructions.
- Capability inventory: The skill is capable of modifying production pricing via update and patch commands.
- Sanitization: No specific filtering or sanitization of external data is specified.
Audit Metadata