push-notification-setup
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements multiple handlers for processing incoming push notification data from Firebase Cloud Messaging (FCM) and native platform services.
- Ingestion points: Notification payloads are ingested in
references/firebase-cloud-messaging-setup.md(onMessage,setBackgroundMessageHandler),references/android-setup-with-kotlin.md(onMessageReceived),references/ios-native-setup-with-swift.md(didReceive), andreferences/flutter-implementation.md(onMessage). - Boundary markers: There are no boundary markers or instructions to ignore embedded commands within the notification data.
- Capability inventory: The code snippets demonstrate the ability to perform network requests (
fetchin JS,URLSessionin Swift), trigger data synchronization (syncData()), and perform application navigation usingdeepLinkstrings andparamsobjects extracted directly from the notification data. - Sanitization: The implementation lacks validation or sanitization for the
deepLinkorparamsfields before they are used in navigation functions (e.g.,navigationRef.navigate(data.deepLink, JSON.parse(data.params || "{}"))), creating a risk where a malicious notification could influence app behavior or navigate the user to unintended destinations.
Audit Metadata