asc-beta-review
Pass
Audited by Gen Agent Trust Hub on May 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the asc CLI tool to interact with Apple services for managing beta app reviews. This is the primary and intended function of the skill.- [CREDENTIALS_UNSAFE]: Refers to a private key file at ~/.asc/AuthKey.p8 for authentication purposes. This follows standard security practices for the referenced tool and does not involve hardcoded secrets.- [PROMPT_INJECTION]: The skill ingests data from local configuration files (.asc/project.json) and CLI output to automate workflows. While it lacks explicit boundary markers for this data, this ingestion is necessary for its primary automation purpose and is not used to override safety guidelines.
Audit Metadata