app-store-optimization
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a potential surface for indirect prompt injection.
- Ingestion points: Untrusted external data enters the agent context via the
current_metadatafield in the metadata optimization schema and through the processing of user reviews in the review analysis capability. - Boundary markers: The documentation does not specify the use of delimiters or 'ignore embedded instructions' markers for the input text.
- Capability inventory: While no code is provided, the described functions in
metadata_optimizer.pyandreview_analyzer.pyindicate the agent is intended to summarize and reformat this external content. - Sanitization: There is no mention of sanitization, filtering, or validation for the processed app store content.
- [NO_CODE]: The analyzed skill consists strictly of markdown documentation, JSON schemas, and descriptions of intended script functions. No actual executable code (e.g., Python, JavaScript) was provided for analysis.
Audit Metadata