authentication
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard and recommended implementation patterns for iOS authentication using official Apple frameworks (AuthenticationServices and LocalAuthentication).
- [SAFE]: Security best practices are enforced, such as advising the use of Keychain for tokens and secrets rather than insecure local storage like UserDefaults or plain files.
- [SAFE]: The skill correctly implements security boundaries by delegating deep cryptographic, storage hardening, and compliance tasks to a specialized sibling security skill.
- [SAFE]: All external references and network operations target well-known, trusted services (such as Apple's JWKS endpoint) or use standard placeholder domains for developer configuration.
- [SAFE]: Biometric authentication patterns include the necessary requirements, such as Info.plist usage descriptions, and correctly treat local evaluation as a re-authentication gate rather than a substitute for Keychain access control.
Audit Metadata