app-store-server-notifications
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements security best practices for handling sensitive webhook data, specifically emphasizing verification over simple decoding to prevent unauthorized state changes.
- [EXTERNAL_DOWNLOADS]: References the official Apple App Store Server Library and associated documentation hosted on GitHub Pages. These references are appropriate for the skill's primary purpose and target trusted infrastructure.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external webhook payloads, it provides explicit defensive measures including cryptographic signature verification, environment checks, and bundle ID validation to ensure the integrity of the processed data.
Audit Metadata