Push Notification Wirer
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown text providing technical guidance for mobile app development. It does not include any executable scripts or command-line operations.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file paths were detected. The instructions correctly emphasize secure practices, such as using token-based authentication (.p8) and service accounts for server-side push, without providing or requesting specific secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill includes security-conscious design patterns to prevent data-driven attacks. Specifically, it warns against treating notification payloads as raw URLs and instead recommends mapping routing keys to typed in-app destinations, which reduces the risk of malicious payload redirection.
- [COMMAND_EXECUTION]: There are no shell commands or subprocess calls present in the skill content.
Audit Metadata