asc-reports
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
asccommand-line tool to perform operations such as downloading sales and financial reports and updating vendor authentication settings. - [PROMPT_INJECTION]: The skill processes data from external reports which serves as an ingestion point for potentially untrusted strings. • Ingestion points: Output from
asc sales-reports,asc finance-reports, andasc analytics-reportscommands as described in SKILL.md. • Boundary markers: No explicit boundary markers or 'ignore' instructions are provided to separate data from commands. • Capability inventory: TheascCLI tool provides capabilities for network-based data retrieval and account configuration. • Sanitization: No sanitization or validation of the report data is mentioned in the skill instructions.
Audit Metadata