activitykit
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for iOS developers using Apple's ActivityKit and WidgetKit frameworks. All code examples follow standard Apple development patterns and best practices.
- [DATA_EXPOSURE_EXFILTRATION]: The skill correctly identifies that Live Activity tokens must be registered with a backend server to enable remote updates. The example code for
pushTokenUpdatesfollows the standard implementation for this feature. Additionally, the documentation explicitly warns against including PII (Personally Identifiable Information) or secrets in the activity state, as it is visible on the lock screen and transmitted via APNs. - [COMMAND_EXECUTION]: No unauthorized or dangerous command execution patterns were found. The XML and Swift snippets provided are standard configuration and application logic for the iOS platform.
- [PROMPT_INJECTION]: No prompt injection or behavior override patterns were detected in the instructions or metadata.
- [EXTERNAL_DOWNLOADS]: The skill does not reference or download external scripts or unverifiable dependencies. It relies entirely on native iOS SDKs (ActivityKit, WidgetKit, SwiftUI, Foundation).
Audit Metadata