push-notifications

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference guide for push notification implementation. It includes code snippets for server-side notification delivery and client-side service worker management.
  • [EXTERNAL_DOWNLOADS]: The skill references standard industry libraries including web-push and the firebase-admin SDK. These are well-known, reputable packages used for notification services.
  • [COMMAND_EXECUTION]: No shell command execution or risky system-level operations were detected. The code snippets provided are for illustrative purposes and follow standard integration patterns.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates best practices by referencing environment variables (e.g., process.env.PRIVATE_VAPID_KEY) for sensitive keys rather than hardcoding credentials.
  • [DATA_EXFILTRATION]: No patterns indicative of data exfiltration or unauthorized network communication were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:24 PM
Security Audit — agent-trust-hub — push-notifications