tipkit
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consistently reinforces security best practices regarding data handling. It explicitly warns developers against storing sensitive information such as balances, Personal Identifiable Information (PII), or tokens within TipKit's
@ParameterorEventidentifiers, noting that the TipKit datastore is not a secure storage mechanism and recommending the Keychain for sensitive data. - [SAFE]: Testing overrides like
showAllTipsForTesting()andresetDatastore()are correctly documented with clear instructions to fence them within#if DEBUGblocks and gate them with launch arguments to prevent accidental exposure in production environments. - [SAFE]: The skill provides clear guidance on using TipKit for discovery rather than legal or mandatory disclosures, ensuring that the dismissible and throttled nature of tips does not interfere with critical user information requirements.
- [SAFE]: Code examples for UIKit and SwiftUI implementation follow standard Apple development patterns and do not involve unsafe command execution, network exfiltration, or unauthorized file access.
Audit Metadata