device-integrity
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security-enhancing guide for developers, teaching robust methods to verify client legitimacy. It explicitly warns against trusting client-side logic and emphasizes server-authoritative verdicts.- [SAFE]: No hardcoded credentials or secrets are present. The documentation uses clearly marked placeholders for sensitive values such as Team IDs, Key IDs, and private key files.- [SAFE]: All external network communications described in the documentation target official, well-known Apple infrastructure (e.g., api.devicecheck.apple.com) for their intended purposes.- [SAFE]: The implementation patterns provided for cryptographic verification (using nonces, sign counts, and certificate chain validation) align with industry standards for preventing replay attacks and device cloning.- [SAFE]: No obfuscation, hidden commands, or suspicious persistence mechanisms were detected in the skill instructions or reference materials.
Audit Metadata