[Safe Apps] Security Profile

[lukasschor]

As we will have multiple ways how to integrate a Safe App into the Safe Multisig, we should communicate potential risks associated with the ways to the user.

Similar to this feature in Zoom:

Or the encryption tooltip in browsers:

Show a shield icon next to the "i" icon (see gnosis/safe-react-apps#321). The shield can be one of three colors:

Yellow:

• For default Safe Apps hosted on IPFS

Orange:

• For default Safe Apps NOT hosted on IPFS
• For manually integrated Safe Apps hosted on IPFS

Red:

• For manually integrated Safe Apps NOT hosted on IPFS

On hover over the shield icon it should display a tooltip with the information (depending on what actually is the case for the specific Safe App):

1) Audited?

No Safe App is audited so far, so all of them should show:

"Attention icon" No audit report available

2) Hosted on IPFS?

For IPFS-hosted:

"Checkmark icon" Hosted on IPFS

For web-hosted:

"Attention icon" Web-hosted

3) Known developer?

For default app:

"Checkmark icon" Known developer

For manually integrated app:

"Attention icon" Unknown developer