asc-app-infos
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
ascCLI tool to interact with the App Store Connect API. It also utilizesjqand shell command substitution ($(...)) to handle JSON data and automate identification of App IDs and localizations. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external command outputs and configuration files, creating a potential surface for indirect injection.
- Ingestion points: Data enters the agent's context through the output of
ascCLI commands and the content of the.asc/project.jsonproject file. - Boundary markers: There are no explicit boundary markers or instructions to ignore embedded prompts within the ingested data.
- Capability inventory: The skill can execute shell commands (
asc,jq) and read local project files. - Sanitization: No explicit sanitization or validation of the ingested CLI output or JSON data is specified in the instructions.
Audit Metadata