add-onesignal-push

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard instructional content and code templates for integrating OneSignal, a well-known and legitimate push notification service, into mobile applications.
  • [EXTERNAL_DOWNLOADS]: The skill references official Node.js packages (onesignal-expo-plugin, react-native-onesignal) from a public registry. These are standard dependencies for the requested functionality.
  • [COMMAND_EXECUTION]: Provides standard package installation commands using pnpm. The commands are limited to the skill's primary purpose of environment setup.
  • [CREDENTIALS_UNSAFE]: The documentation correctly uses a placeholder (YOUR_ONESIGNAL_APP_ID) instead of hardcoding sensitive credentials, which is a safe practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 11:17 PM
Security Audit — agent-trust-hub — add-onesignal-push