cometchat-native-bare-patterns

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard development commands such as npm install, pod install, and npx react-native run-ios. These are appropriate for the intended use case of mobile app development.
  • [CREDENTIALS_UNSAFE]: The documentation includes explicit security best practices, advising users to use environment variables for sensitive keys, update .gitignore to prevent committing secrets, and avoid placing server-side API keys in client-side code.
  • [EXTERNAL_DOWNLOADS]: Dependencies are restricted to official vendor packages and well-known open-source libraries (e.g., react-native-gesture-handler, react-native-video) sourced from the public npm registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 02:50 AM