asc-metrics
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from App Store Connect APIs and local context files (
app-marketing-context.md). - Ingestion points: Reads application performance data (revenue, downloads, trends) from the Appeeky API and application metadata from
app-marketing-context.md. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Analysis and output generation; no file system writes or subprocess executions identified.
- Sanitization: Not explicitly mentioned, but the skill is limited to read-only analysis of business metrics.
- [DATA_EXPOSURE]: The skill facilitates the analysis of sensitive business data (revenue, downloads). However, this is the primary, intended function of the skill for the user's own data and does not involve exfiltration to unauthorized parties.
- [COMMAND_EXECUTION]: The skill uses
bashblocks to document API endpoints (GET /v1/connect/metrics), but these are representative of HTTP requests rather than local shell command execution.
Audit Metadata