Skills
skills/tddworks/asc-cli-skills/asc-builds-archive/Gen Agent Trust Hub

asc-builds-archive

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes xcodebuild system commands to archive Xcode projects and export distribution-ready IPA or PKG binaries.- [COMMAND_EXECUTION]: Utilizes the asc CLI tool to perform network-based operations including uploading builds to App Store Connect and managing beta distribution.- [PROMPT_INJECTION]: The skill possesses a surface area for indirect prompt injection by processing external data at runtime.
  • Ingestion points: Reads local configuration from .asc/project.json and parses outputs from asc builds list and asc apps list.
  • Boundary markers: Absent; no delimiters are used to separate untrusted data from instructions.
  • Capability inventory: Includes the ability to execute shell commands (xcodebuild) and perform remote data operations (asc).
  • Sanitization: No input validation or escaping mechanisms are described for data retrieved from the environment or tool outputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 02:30 PM