skills/thienqo/ios-skills/cryptokit/Gen Agent Trust Hub

cryptokit

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill provides high-quality instructional content and code snippets for implementing cryptographic primitives. It correctly identifies and warns against common security mistakes such as nonce reuse, weak hashing (MD5/SHA1), and storing keys in unsafe locations like UserDefaults.\n- [SAFE]: All cryptographic examples follow industry standards, including the use of HKDF for key derivation, authenticated encryption (AES-GCM/ChaChaPoly), and Secure Enclave integration for hardware-backed security.\n- [SAFE]: The skill contains references to documentation on the sosumi.ai domain. While not an official Apple domain, these are static links intended for human consumption and do not trigger automated network operations or remote code execution.\n- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, obfuscation, or privilege escalation were detected. The skill does not define any executable tools or scripts, which significantly limits its potential as an attack vector.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:01 PM