asc-users
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
ascCLI tool to perform administrative tasks on App Store Connect, such as user role management and invitation handling. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from CLI outputs (e.g., user lists and invitations) to automate workflows. While this represents an ingestion surface for external data, the behaviors described are standard for team management and do not include instructions to override agent safety guidelines.
- [SAFE]: Authentication instructions follow industry best practices by using placeholders for credentials and referencing standard local file paths (e.g.,
~/.asc/AuthKey.p8) for private keys rather than embedding secrets directly in the skill.
Audit Metadata