axiom-app-store-connect-ref
Warn
Audited by Snyk on Feb 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs downloading and ingesting user-generated crash logs and TestFlight feedback from App Store Connect (see "Downloading Crash Logs" and the App Store Connect API endpoints like diagnosticLogs and betaFeedback), and it directs the agent to parse/analyze those artifacts, so untrusted third-party content could materially influence agent behavior.
Audit Metadata