eas-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration schemas and technical documentation from official Expo sources.\n
- Fetches workflow JSON schemas from
api.expo.dev.\n - Downloads syntax and pre-packaged job documentation from the official
expo/expoGitHub repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, which creates a potential surface for indirect prompt injection if the source content is compromised.\n - Ingestion points: The
scripts/fetch.jsutility retrieves content from external URLs such asapi.expo.devandgithub.com.\n - Boundary markers: There are no explicit instructions to the agent to use specific delimiters or to ignore potential instructions embedded within the fetched documents.\n
- Capability inventory: The skill possesses the ability to read and write files and to execute specific CLI tools via
nodeandnpx(specificallyeas-cliand@expo/agent-cli).\n - Sanitization: Ingested content is passed to the agent's context for processing without an intermediary sanitization or filtering step.
Audit Metadata