OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill provides instructions for automating App Store Connect tasks using a browser and a CLI tool called 'asc'. It includes safety guidelines like avoiding cookie exports and requiring user confirmation. However, it presents a potential attack surface for command injection because it instructs the agent to use user-supplied inputs (like app names and bundle IDs) directly in shell commands without explicit sanitization steps.
Detected behaviors
No alerts
No issues