asc-app-create-ui
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data (app name, bundle ID, SKU, platform) and interpolates it into shell commands for the 'asc' CLI. This creates a surface where a malicious user could provide input designed to break out of the command string.
- Ingestion points: App name, bundle ID, and SKU inputs provided by the user.
- Boundary markers: Absent; the instructions use double quotes in examples but do not specify robust escaping for the agent to follow.
- Capability inventory: The skill performs shell execution of the 'asc' CLI and browser automation via Playwright or equivalent tools.
- Sanitization: Absent; there are no instructions to sanitize or validate the user-provided strings before execution.
- [COMMAND_EXECUTION]: The skill relies on the execution of multiple shell commands using the 'asc' tool (e.g.,
asc bundle-ids create,asc apps list,asc pricing availability create) to perform account management and configuration tasks.
Audit Metadata