device-integrity

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a security-enhancing guide for developers, teaching robust methods to verify client legitimacy. It explicitly warns against trusting client-side logic and emphasizes server-authoritative verdicts.- [SAFE]: No hardcoded credentials or secrets are present. The documentation uses clearly marked placeholders for sensitive values such as Team IDs, Key IDs, and private key files.- [SAFE]: All external network communications described in the documentation target official, well-known Apple infrastructure (e.g., api.devicecheck.apple.com) for their intended purposes.- [SAFE]: The implementation patterns provided for cryptographic verification (using nonces, sign counts, and certificate chain validation) align with industry standards for preventing replay attacks and device cloning.- [SAFE]: No obfuscation, hidden commands, or suspicious persistence mechanisms were detected in the skill instructions or reference materials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 09:00 PM
Security Audit — agent-trust-hub — device-integrity