cryptokit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality cryptographic guidance, correctly recommending authenticated encryption (AES-GCM/ChaChaPoly) and constant-time verification for authentication codes.\n- [SAFE]: Proper key management is emphasized, including the use of the Secure Enclave for hardware-backed security and the Keychain for persistent storage, following Apple's recommended security model.\n- [SAFE]: The skill includes defensive coding advice, warning developers against common pitfalls such as hardcoded nonces, insecure hashing algorithms (MD5/SHA1), and unsafe storage of key material in UserDefaults.\n- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized network operations were detected across the skill's instructions or referenced documentation.
Audit Metadata