asc-localize-metadata — security audits

Passed all audits

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  This skill facilitates App Store metadata localization using the asc CLI and LLM-based translation. It correctly identifies app and version IDs and manages the metadata upload process. A low-risk indirect prompt injection surface exists during the translation phase when processing external app descriptions, although the skill employs boundary markers to mitigate this risk.

  Risk: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONApr 17, 2026Full report

• Socket

  pass

  No alerts

  Apr 17, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWApr 17, 2026Full report