capacitor-push-notifications
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes implementation patterns that process untrusted data from incoming push notification payloads, creating a potential ingestion point for malicious instructions.
- Ingestion points: The documentation in
SKILL.mdincludes implementation ofpushNotificationReceivedandpushNotificationActionPerformedlisteners, which process data directly from external notification services (FCM and APNs). - Boundary markers: The provided code snippets do not incorporate specific delimiters or instructions to ignore potential commands embedded within the notification content.
- Capability inventory: The skill shows how to use notification data for application logic such as logging (
console.log), UI navigation (handleNotificationTap), and scheduling local notifications. - Sanitization: The implementation examples do not demonstrate explicit sanitization or validation of the external notification payload before use.
- [SAFE]: The skill references and uses tools and services from well-known and trusted providers including Firebase (Google), Apple (APNs), and the official Capacitor plugin ecosystem. No suspicious network activity or obfuscation was detected.
Audit Metadata