asc-availability

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for executing various 'asc' CLI commands to manage App Store Connect resources, such as apps, in-app purchases, and subscriptions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data which presents a surface for indirect prompt injection.
  • Ingestion points: Data is ingested from the '.asc/project.json' file and from the outputs of the 'asc' CLI tool (SKILL.md).
  • Boundary markers: There are no boundary markers or instructions to isolate the data processed from these sources.
  • Capability inventory: The agent can execute commands that modify App Store settings and read local files.
  • Sanitization: No sanitization or validation of the ingested data is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 11:19 AM