app-intents-widgets
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance and Swift code examples for Apple's App Intents and WidgetKit frameworks. The examples follow best practices for concurrency (Sendable, actors) and data encapsulation.
- [SAFE]: Shell commands provided in
SKILL.md(xcodebuild,xcrun,rg) are standard macOS developer tools used for project discovery and configuration auditing. These are used to inspect bundle identifiers, deployment targets, and relevant source code patterns. - [SAFE]: The skill includes explicit security and privacy recommendations in
references/architecture-and-privacy.md. It specifically warns against credential leakage in URLs, unauthorized data exposure on lock screens, and insecure data sharing in App Group containers. - [SAFE]: The code samples use legitimate system APIs (e.g.,
AppDependencyManager,TimelineProvider) and demonstrate how to implement authentication policies (IntentAuthenticationPolicy.requiresAuthentication) and user confirmation for destructive actions. - [SAFE]: No obfuscation, data exfiltration patterns, unauthorized persistence mechanisms, or suspicious remote dependencies were identified.
Audit Metadata