line-mini-app — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited line-mini-app (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Do not answer LINE MINI App questions from memory — LINE updates APIs frequently and training data is unreliable. Always consult the references below.
LINE MINI App is a web app platform built on LIFF that runs inside LINE.
LIFF_ID=LIFF app ID (LINE MINI App runs on LIFF)
LINE_CHANNEL_ACCESS_TOKEN=Stateless channel access token (Service Messages, IAP)
LINE_LOGIN_CHANNEL_ID=LINE Login Channel ID (server-side verification)
LINE_LOGIN_CHANNEL_SECRET=Channel secret (server-side only)| Feature | LIFF | MINI App |
|---|---|---|
| Service Messages | ✗ | ✅ Proactive notifications via notification token |
| Common Profile Quick Fill | ✗ | ✅ Auto-fill forms with LINE profile data |
| In-App Purchase | ✗ | ✅ App store payments (iOS/Android) |
| Submission review | Not required | Required (LINE review process) |
| Entry point | LIFF URL | LINE MINI App list + LIFF URL |
All LIFF APIs are available in MINI App context (LIFF browser). See Key Constraints for external browser limitations.
User opens MINI App → liff.getAccessToken() → Issue notification token → Send service messages (max 5)Full API specs, template structure, error codes → [references/service-messages.md](references/service-messages.md)
const result = await liff.$commonProfile.get(scopes, { formatOptions });
liff.$commonProfile.fill(result.data); // auto-fill <input data-liff-autocomplete="...">Full API specs, scopes, dummy data → [references/common-profile.md](references/common-profile.md)
Japan only. Consumable digital content only. Requires LIFF SDK ≥ 2.26.0, LINE ≥ 15.6.0, LIFF browser.
Purchase flow (client + server), dev guidelines, error codes → [references/in-app-purchase.md](references/in-app-purchase.md)
openid — profile, email, chat_message.write require verification screen; needs LIFF SDK v2.13.x+, verified MINI Appliff.init() doesn't auto-login (use withLoginOnExternalBrowser: true); sendMessages, openWindow, closeWindow, iap.* unavailable| File | Topic |
|---|---|
| references/guidelines.md | Read first. MINI App overview, verified vs unverified, specs, performance, migration, development rules, Quick Fill design regulations |
| references/console-setup.md | Channel creation, 3 internal channels, LIFF ID, tokens, basic auth, display mapping, localization, settings reflection, re-review |
| references/features.md | Built-in features (action button, multi-tab, consent simplification), custom features (Custom Path, shortcuts, custom action button, share messages, OA, payments), permanent links, external browser, UI components |
| references/service-messages.md | Notification token lifecycle, sending API, template structure, review lifecycle, character limits, error codes |
| references/common-profile.md | Quick Fill API, scopes, form auto-fill, plugin setup, dummy data |
| references/in-app-purchase.md | Purchase flow (client + server), reserve, webhooks, dev guidelines, application & setup, test payment, error codes |
| references/submission-review.md | Submission process, pre-review checklist, review period, approval flow, publish changes |
| references/experts.md | LINE MINI App domain experts for architecture guidance |
npx @line/create-liff-app~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.