storekit
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical guidance for StoreKit 2 implementation in iOS applications. Analysis across all threat categories confirms the content is instructional and follows security best practices.
- [PROMPT_INJECTION]: No evidence of prompt injection, instruction overrides, or safety filter bypass attempts found in instructions or metadata.
- [DATA_EXFILTRATION]: No sensitive file paths, credential exfiltration patterns, or unauthorized network operations detected. The code snippets use local variables and placeholders for application-specific logic.
- [OBFUSCATION]: No Base64, zero-width characters, homoglyphs, or other obfuscation techniques were found. All URLs and identifiers are plain text and contextually appropriate.
- [REMOTE_CODE_EXECUTION]: The skill does not perform external downloads, package installations, or remote script execution. Swift code snippets are provided for reference only.
- [DYNAMIC_CONTEXT_INJECTION]: No dynamic context execution patterns (
!command) or shell command injection vulnerabilities were detected. - [INDIRECT_PROMPT_INJECTION]: The skill emphasizes transaction verification (
VerificationResult) and secure handling of StoreKit data, reducing the risk of processing malicious or unverified inputs.
Audit Metadata