gpc-preflight

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to execute the gpc CLI tool for auditing Android artifacts (AAB/APK) and checking signing key consistency via the Google Play API.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (AAB/APK files, source code, and metadata folders).
  • Ingestion points: Files and directories passed to the gpc command in SKILL.md.
  • Boundary markers: None provided to distinguish file content from agent instructions.
  • Capability inventory: Execution of the gpc CLI and network access to Google Play Developer APIs.
  • Sanitization: None described for external file inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 08:48 AM