mobile-engage
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a guide for mobile app developers to implement retention loops and push notification maps correctly. It contains documentation and architectural advice rather than executable scripts.
- [SAFE]: The skill includes extensive security and privacy guidelines for using AI (Large Language Models) to generate notification copy. Specifically, it mandates the use of fallbacks, schema validation (e.g., using Zod), and strict PII (Personally Identifiable Information) prevention by limiting prompts to IDs and non-sensitive data.
- [SAFE]: All external service references, such as the Expo push notification API (
exp.host), are well-known, industry-standard services required for the skill's primary function of managing mobile notifications. - [SAFE]: The instructions for verifying delivery (E10 gate) focus on using official provider receipts rather than untrusted job logs, which is a security best practice for ensuring system integrity.
Audit Metadata