push-notifications
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides boilerplate code for standard iOS/macOS push notification features. All external network references in the documentation, such as Apple's APNs endpoints, target official and trusted service domains.
- [PROMPT_INJECTION]: The skill defines a surface for processing external data through push notification payloads. This is an inherent aspect of notification handling and follows best practices for data parsing.
- Ingestion points: Notification data is processed in
NotificationDelegate.swiftandAppDelegate.swiftthrough theuserInfodictionary passed from the system. - Boundary markers: None; the data is handled as structured dictionaries where values are extracted by key.
- Capability inventory: The generated code templates support application navigation, deep link handling, and remote image downloading within a service extension.
- Sanitization: The implementation uses type-safe parsing with Swift enums and standard casting, ensuring that extracted data is validated against expected types.
Audit Metadata