Skills
skills/adibfirman/dotfiles/react-native-best-practices/Gen Agent Trust Hub

react-native-best-practices

Fail

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The file references/js-measure-fps.md contains the command curl https://get.flashlight.dev | bash. This is a high-risk pattern known as piped remote execution, which allows for the arbitrary execution of unverified scripts from a remote server directly in the user's shell.- [EXTERNAL_DOWNLOADS]: The skill references and encourages the installation of numerous third-party Node.js packages and external CLI tools such as flashlight, source-map-explorer, and various React Native libraries to perform optimization tasks.- [COMMAND_EXECUTION]: Multiple reference files provide instructions for executing shell commands including npx, gradlew, xcodebuild, and zipalign to build, bundle, and analyze mobile application binaries.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
May 2, 2026, 11:44 AM