push-notifications
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill instructions and code snippets adhere to platform-standard security practices for mobile development.
- [INDIRECT_PROMPT_INJECTION]: The skill explicitly identifies that data received from remote servers via APNs is untrusted. It includes specific guidelines for validating and sanitizing these inputs before they are used to drive application logic or navigation, effectively addressing the surface for indirect prompt injection.
- [CREDENTIALS_UNSAFE]: The skill identifies the risks of insecure storage for sensitive data. It explicitly warns against storing decryption keys or sensitive tokens in insecure shared containers like App Group UserDefaults, instead directing developers to use Keychain Sharing for secure credential management.
Audit Metadata