gpc-preflight
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute the
gpcCLI tool for auditing Android artifacts (AAB/APK) and checking signing key consistency via the Google Play API. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (AAB/APK files, source code, and metadata folders).
- Ingestion points: Files and directories passed to the
gpccommand in SKILL.md. - Boundary markers: None provided to distinguish file content from agent instructions.
- Capability inventory: Execution of the
gpcCLI and network access to Google Play Developer APIs. - Sanitization: None described for external file inputs.
Audit Metadata