skills/expo/skills/eas-workflows/Gen Agent Trust Hub

eas-workflows

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches configuration schemas and technical documentation from official Expo sources.\n
  • Fetches workflow JSON schemas from api.expo.dev.\n
  • Downloads syntax and pre-packaged job documentation from the official expo/expo GitHub repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, which creates a potential surface for indirect prompt injection if the source content is compromised.\n
  • Ingestion points: The scripts/fetch.js utility retrieves content from external URLs such as api.expo.dev and github.com.\n
  • Boundary markers: There are no explicit instructions to the agent to use specific delimiters or to ignore potential instructions embedded within the fetched documents.\n
  • Capability inventory: The skill possesses the ability to read and write files and to execute specific CLI tools via node and npx (specifically eas-cli and @expo/agent-cli).\n
  • Sanitization: Ingested content is passed to the agent's context for processing without an intermediary sanitization or filtering step.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 09:15 PM