vega-multi-tv-migration

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The migration process involves executing standard package management and build commands. Instructions include initializing projects with yarn init -2, installing dependencies with yarn install, and performing native prebuilds using npx expo prebuild. These are routine operations for managing React Native monorepos.\n- [DYNAMIC_EXECUTION]: The skill incorporates dynamic build-time logic through project configuration files and scripts. This includes a shell script (fix-tvos-deployment.sh) designed to automate the correction of tvOS deployment targets in generated Xcode projects, as well as customized Metro and Babel configurations for handling cross-package dependency resolution.\n- [EXTERNAL_DOWNLOADS]: The skill's templates and instructions reference numerous external dependencies hosted on public registries. This includes core React Native and Expo libraries, community-maintained TV-specific forks like react-native-tvos, and vendor-specific module resolution presets from the @amazon-devices namespace.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing and refactoring existing application code, which serves as an ingestion point for potentially untrusted data. While it lacks explicit boundary markers or sanitization for input code, its capabilities are limited to standard development tasks such as file modification and package installation (yarn install) without granting elevated privileges or performing unsafe operations based on the processed data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:33 PM