app-store-optimization
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to perform ASO audits by analyzing project files such as Fastlane metadata,
Info.plist, andbuild.gradle.kts. These operations are consistent with its stated purpose of improving app store discoverability. - [DATA_EXPOSURE]: The skill accesses local project metadata and configuration files to extract app listing elements (titles, descriptions, keywords). This data access is localized to the project directory and is necessary for the analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from app metadata files and user reviews, creating a surface for indirect prompt injection.
- Ingestion points: Reads content from
fastlane/metadata/,Info.plist,build.gradle.kts, and external store review data. - Boundary markers: None identified; instructions are interpolated directly into the analysis phase.
- Capability inventory: Performs file writes to
docs/aso-analysis.mdand appends telemetry to~/.claude/projects/(agent memory path). - Sanitization: No explicit sanitization or escaping of ingested data is mentioned.
- [COMMAND_EXECUTION]: The skill suggests running follow-up commands such as
/store-complianceand/mobile-analytics. These appear to be references to other available skills within the agent environment rather than arbitrary shell execution.
Audit Metadata