device-integrity
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements official Apple frameworks (DeviceCheck and CryptoKit) according to public documentation for verifying device and app integrity.\n- [SAFE]: Sensitive identifiers such as the App Attest keyId are persisted using the iOS Keychain with appropriate accessibility attributes (kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly), adhering to platform security standards.\n- [SAFE]: Network communications involve sending tokens and attestations to a developer-specified server and official Apple endpoints (api.devicecheck.apple.com). The logic includes hashing challenges (SHA-256) and verifying server responses.\n- [SAFE]: External references point to a non-official documentation site (sosumi.ai). While these serve as informational links and do not involve code execution or package installation, they are identified as placeholder references rather than official Apple developer portal links.
Audit Metadata