push-notification-setup

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill implements multiple handlers for processing incoming push notification data from Firebase Cloud Messaging (FCM) and native platform services.
  • Ingestion points: Notification payloads are ingested in references/firebase-cloud-messaging-setup.md (onMessage, setBackgroundMessageHandler), references/android-setup-with-kotlin.md (onMessageReceived), references/ios-native-setup-with-swift.md (didReceive), and references/flutter-implementation.md (onMessage).
  • Boundary markers: There are no boundary markers or instructions to ignore embedded commands within the notification data.
  • Capability inventory: The code snippets demonstrate the ability to perform network requests (fetch in JS, URLSession in Swift), trigger data synchronization (syncData()), and perform application navigation using deepLink strings and params objects extracted directly from the notification data.
  • Sanitization: The implementation lacks validation or sanitization for the deepLink or params fields before they are used in navigation functions (e.g., navigationRef.navigate(data.deepLink, JSON.parse(data.params || "{}"))), creating a risk where a malicious notification could influence app behavior or navigate the user to unintended destinations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:44 AM
Security Audit — agent-trust-hub — push-notification-setup