asc-app-previews

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the asc CLI tool to manage app previews, which involves shell execution of commands such as app-preview-sets and app-previews to list, create, and upload assets.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions allow user-provided identifiers and file paths to be interpolated into shell commands, creating a potential injection surface.
  • Ingestion points: Localization IDs, set IDs, and file paths in SKILL.md are provided by external input.
  • Boundary markers: None identified in the skill content to separate instructions from data.
  • Capability inventory: Execution of shell commands via the asc tool as defined in SKILL.md.
  • Sanitization: The instructions do not define any validation, filtering, or escaping of user-provided arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 08:43 AM