token-storage
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for mobile developers on how to securely handle token storage, rotation, and revocation.
- [SAFE]: Instructional code snippets in Kotlin and Dart demonstrate standard security patterns such as using mutexes for token refresh and persisting secrets in secure hardware-backed storage (Keychain/Keystore).
- [SAFE]: The skill explicitly warns against insecure practices such as logging sensitive headers, using plaintext storage, or exposing tokens in URL parameters.
- [SAFE]: No obfuscation, data exfiltration, or unauthorized command execution patterns were detected.
Audit Metadata