push-notifications
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill documents the process of sending APNs device tokens to a developer's backend server using the
TokenServiceandAPIClientpatterns. This is an essential and standard part of push notification implementation. - [EXTERNAL_DOWNLOADS]: The
NotificationServiceExtensionexample demonstrates downloading rich media content (images, audio, video) from URLs provided in the notification payload usingURLSession. This is the standard method for supporting rich notifications on iOS. - [COMMAND_EXECUTION]: The code snippets use standard Swift APIs and system frameworks like
UserNotifications. No arbitrary command execution or unsafe subprocess calls are present. - [PROMPT_INJECTION]: The skill documentation is purely technical and does not contain instructions that attempt to override agent behavior or bypass safety guidelines.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill handles data from remote notification payloads (
userInfodictionary) and URLs for media attachments. - Boundary markers: Not explicitly defined in the snippets, which is typical for standard data models.
- Capability inventory: Capabilities are limited to standard UI updates, local file writes for attachments, and data synchronization triggers.
- Sanitization: The snippets use strong typing and Swift's optional binding (
guard let) to safely extract data from payloads.
Audit Metadata