asc-app-wall
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the vendor's
ascCLI tool to automate repository forking, committing changes, and opening pull requests. It also references standard tools like the GitHub CLI (gh) for authentication and theopencommand for browser interaction. - [EXTERNAL_DOWNLOADS]: The skill interacts with GitHub to fetch the
apps.jsonregistry and manage repository state within thetddworks/asc-clirepository, which is a resource owned by the skill author. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs such as developer handles, Apple IDs, and App Store URLs to populate command flags.
- Ingestion points: User-provided strings for flags like
--developer,--developer-id, and--appinSKILL.md. - Boundary markers: Not present; the instructions provide direct interpolation of user input into shell commands.
- Capability inventory: File system access (implicit in CLI), network operations (GitHub API), and command execution.
- Sanitization: Relies on the underlying
ascCLI tool to sanitize inputs before processing or committing to the repository.
Audit Metadata