app-store-server-notifications
Fail
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation at
apple.github.io. This is the official repository for Apple's open-source App Store Server Library documentation. The automated security alerts regarding this URL are determined to be false positives given the trusted origin of the source. - [SAFE]: The provided code implements robust security controls for processing external webhook data. It specifically rejects unsafe decode-only parsing in favor of mandatory signature verification using the official
@apple/app-store-server-library. Additionally, it demonstrates correct secret management through environment variables and ensures data integrity by implementing idempotency checks to prevent replay attacks.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata