react-native-brownfield-migration

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands such as 'npm install', 'npx brownfield', 'pod install', and Gradle builds to perform packaging and integration tasks.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and artifacts from the official vendor domain 'oss.callstack.com' and the npm registry, which are standard for the stated development purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration files such as 'package.json' and 'app.json' to classify the project and determine the migration path. This constitutes a standard ingestion surface for project-based tools.
  • Ingestion points: 'package.json' and 'app.json' are inspected in 'SKILL.md' and 'references/quick-start.md'.
  • Boundary markers: None explicitly mentioned for data ingestion.
  • Capability inventory: Shell command execution ('npm', 'npx', 'pod', 'gradle') and native file system modifications are present across all platform integration reference files.
  • Sanitization: Relies on the agent to interpret configuration values within the context of React Native migration steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:09 PM
Security Audit — agent-trust-hub — react-native-brownfield-migration