asc-reports
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions guide the agent to execute various subcommands of the
ascCLI tool, including downloading reports and managing analytics requests. These commands are the primary mechanism for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from App Store Connect reports. As the agent ingests this external data, it presents a potential surface for indirect prompt injection attacks.
- Ingestion points: External data downloaded via
asc sales-reportsandasc finance-reportssubcommands (SKILL.md). - Boundary markers: No explicit delimiters or instructional boundaries are defined for the retrieved data.
- Capability inventory: The
asctool performs network operations and data retrieval (SKILL.md). - Sanitization: The skill lacks explicit sanitization or validation logic for data parsed from the external reports.
Audit Metadata