asc-reports

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions guide the agent to execute various subcommands of the asc CLI tool, including downloading reports and managing analytics requests. These commands are the primary mechanism for the skill's functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from App Store Connect reports. As the agent ingests this external data, it presents a potential surface for indirect prompt injection attacks.
  • Ingestion points: External data downloaded via asc sales-reports and asc finance-reports subcommands (SKILL.md).
  • Boundary markers: No explicit delimiters or instructional boundaries are defined for the retrieved data.
  • Capability inventory: The asc tool performs network operations and data retrieval (SKILL.md).
  • Sanitization: The skill lacks explicit sanitization or validation logic for data parsed from the external reports.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 08:43 AM