TestFlight Expert
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEDATA_EXFILTRATION
Full Analysis
- Data Exposure & Exfiltration (LOW): The documentation identifies
~/.appstore/AuthKey.p8as the storage location for sensitive App Store Connect API keys. While this is intended for user guidance, it provides the agent with the location of a high-value target for potential exfiltration. - Indirect Prompt Injection (LOW): The skill possesses a vulnerability surface for indirect injection.
- Ingestion points: The
WebFetchtool allows the agent to ingest untrusted data from the web. - Boundary markers: Absent. There are no instructions to delimit or ignore instructions within fetched content.
- Capability inventory: The agent has
Bash,Edit, andReadcapabilities across the environment, which could be exploited by malicious payloads in external data. - Sanitization: Absent. No filtering or validation of external content is performed before processing.
Audit Metadata