expo-cicd-workflows-v55
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches workflow schemas and syntax documentation from official Expo domains (
api.expo.devandgithub.com/expo). These are trusted, well-known sources necessary for the skill's primary function of CI/CD workflow generation. - [COMMAND_EXECUTION]: The skill uses local Node.js scripts (
fetch.jsandvalidate.js) to perform its tasks. These scripts follow best practices for file handling and network requests, including the use of ETags for efficient caching and local path resolution. - [DATA_EXFILTRATION]: No patterns of sensitive data exposure or exfiltration were found. Network operations are limited to fetching public documentation and schemas from verified Expo endpoints.
- [REMOTE_CODE_EXECUTION]: The skill does not execute remote code. It performs local validation of YAML files against a downloaded JSON schema using the standard
ajvlibrary.
Audit Metadata