App Store Optimizer
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to process and optimize external, potentially untrusted app metadata (titles, descriptions, user intent data), which creates a vulnerability surface for indirect prompt injection.
- Ingestion points: The strategy and deliverable templates in
SKILL.mdingest user-supplied app details, keywords, and competitive analysis data. - Boundary markers: Absent. The skill does not employ delimiters or specific instructions to the agent to disregard commands embedded within the input data.
- Capability inventory: The skill is limited to text generation and lacks high-risk capabilities such as file system writing, network requests, or shell execution.
- Sanitization: Absent. There is no evidence of input validation or escaping for the processed external content.
- [SAFE]: The skill uses non-printable Unicode control characters (such as U+0004 and U+0080) in section headers. While unusual, these characters do not decode to hidden commands or URLs and appear to be used for stylistic or structural formatting within the prompt.
Audit Metadata