asc-promoted-purchases
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a local project file, which creates a potential injection surface if the file contains malicious content.\n
- Ingestion points: The skill reads the
appIdvalue from.asc/project.json(SKILL.md).\n - Boundary markers: No boundary markers or instructions are provided to the agent to ignore potentially malicious instructions within the configuration file.\n
- Capability inventory: The skill performs shell execution of the
ascCLI tool, which can be manipulated if arguments are injected.\n - Sanitization: There is no evidence of sanitization or validation of the data extracted from the JSON file before it is used in a shell command string.\n- [COMMAND_EXECUTION]: The skill instructions specifically direct the agent to execute shell commands using the
ascCLI tool to manage App Store promotion slots.
Audit Metadata