asc-app-previews
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
ascCLI tool to manage app previews, which involves shell execution of commands such asapp-preview-setsandapp-previewsto list, create, and upload assets. - [INDIRECT_PROMPT_INJECTION]: The skill instructions allow user-provided identifiers and file paths to be interpolated into shell commands, creating a potential injection surface.
- Ingestion points: Localization IDs, set IDs, and file paths in
SKILL.mdare provided by external input. - Boundary markers: None identified in the skill content to separate instructions from data.
- Capability inventory: Execution of shell commands via the
asctool as defined inSKILL.md. - Sanitization: The instructions do not define any validation, filtering, or escaping of user-provided arguments.
Audit Metadata