app-store-optimization

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to perform ASO audits by analyzing project files such as Fastlane metadata, Info.plist, and build.gradle.kts. These operations are consistent with its stated purpose of improving app store discoverability.
  • [DATA_EXPOSURE]: The skill accesses local project metadata and configuration files to extract app listing elements (titles, descriptions, keywords). This data access is localized to the project directory and is necessary for the analysis.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from app metadata files and user reviews, creating a surface for indirect prompt injection.
  • Ingestion points: Reads content from fastlane/metadata/, Info.plist, build.gradle.kts, and external store review data.
  • Boundary markers: None identified; instructions are interpolated directly into the analysis phase.
  • Capability inventory: Performs file writes to docs/aso-analysis.md and appends telemetry to ~/.claude/projects/ (agent memory path).
  • Sanitization: No explicit sanitization or escaping of ingested data is mentioned.
  • [COMMAND_EXECUTION]: The skill suggests running follow-up commands such as /store-compliance and /mobile-analytics. These appear to be references to other available skills within the agent environment rather than arbitrary shell execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 10:56 AM
Security Audit — agent-trust-hub — app-store-optimization