push-notifications

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill documents the process of sending APNs device tokens to a developer's backend server using the TokenService and APIClient patterns. This is an essential and standard part of push notification implementation.
  • [EXTERNAL_DOWNLOADS]: The NotificationServiceExtension example demonstrates downloading rich media content (images, audio, video) from URLs provided in the notification payload using URLSession. This is the standard method for supporting rich notifications on iOS.
  • [COMMAND_EXECUTION]: The code snippets use standard Swift APIs and system frameworks like UserNotifications. No arbitrary command execution or unsafe subprocess calls are present.
  • [PROMPT_INJECTION]: The skill documentation is purely technical and does not contain instructions that attempt to override agent behavior or bypass safety guidelines.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill handles data from remote notification payloads (userInfo dictionary) and URLs for media attachments.
  • Boundary markers: Not explicitly defined in the snippets, which is typical for standard data models.
  • Capability inventory: Capabilities are limited to standard UI updates, local file writes for attachments, and data synchronization triggers.
  • Sanitization: The snippets use strong typing and Swift's optional binding (guard let) to safely extract data from payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 03:44 AM