vega-multi-tv-migration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The migration process involves executing standard package management and build commands. Instructions include initializing projects with
yarn init -2, installing dependencies withyarn install, and performing native prebuilds usingnpx expo prebuild. These are routine operations for managing React Native monorepos.\n- [DYNAMIC_EXECUTION]: The skill incorporates dynamic build-time logic through project configuration files and scripts. This includes a shell script (fix-tvos-deployment.sh) designed to automate the correction of tvOS deployment targets in generated Xcode projects, as well as customized Metro and Babel configurations for handling cross-package dependency resolution.\n- [EXTERNAL_DOWNLOADS]: The skill's templates and instructions reference numerous external dependencies hosted on public registries. This includes core React Native and Expo libraries, community-maintained TV-specific forks likereact-native-tvos, and vendor-specific module resolution presets from the@amazon-devicesnamespace.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing and refactoring existing application code, which serves as an ingestion point for potentially untrusted data. While it lacks explicit boundary markers or sanitization for input code, its capabilities are limited to standard development tasks such as file modification and package installation (yarn install) without granting elevated privileges or performing unsafe operations based on the processed data.
Audit Metadata