expo-deployment
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): The skill references 'npx testflight', which is not a standard or official tool for Expo deployments. This poses a risk of executing unverified code from the public npm registry. \n- [EXTERNAL_DOWNLOADS] (MEDIUM): Commands use 'npx eas-cli@latest'. Using the 'latest' tag for execution is an unversioned pattern that can result in running unvetted code updates. \n- [COMMAND_EXECUTION] (SAFE): The skill uses standard EAS CLI commands for app builds and submissions, consistent with its primary purpose. \n- [CREDENTIALS_UNSAFE] (SAFE): Examples for configuration and secrets use placeholders for sensitive data like Apple IDs and API keys, following safe documentation practices.
Audit Metadata