passkit
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The instructions strictly adhere to Apple's official security and implementation guidelines for the PassKit framework.
- [SAFE]: The skill includes explicit warnings against insecure practices, specifically advising against the persistence or logging of unencrypted payment data (payment.token.paymentData).
- [SAFE]: The guidance correctly identifies that sensitive cryptographic assets, such as Pass Type ID signing certificates, must remain on the server and never be bundled with the client application.
- [SAFE]: All code examples for network interactions and merchant validation use generic placeholders or standard API endpoints with recommendations for secure, pinned TLS connections.
Audit Metadata