expo-animation
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install standard React Native and Expo community libraries such as
react-native-reanimated,react-native-gesture-handler, andexpo-routerusing the officialnpx expo installcommand to ensure version compatibility. - [REMOTE_CODE_EXECUTION]: The
SKILL.mdfile contains a command for submitting feedback usingnpx --yes submit-expo-feedback@latest. This utility is a vendor-specific tool provided for reporting issues or inaccuracies within the skill instructions. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a construction assistant, generating animation code based on user requests. While it includes extensive 'Hard Rules' and 'Recipes' to constrain output to high-quality patterns, it does not explicitly define delimiters for segmenting untrusted user instructions within its processing flow.
- [DYNAMIC_EXECUTION]: The provided recipes utilize Reanimated worklets, which involve executing code on the device's UI thread. These are implemented following established safety patterns for the
react-native-reanimatedlibrary and do not incorporate untrusted external data into the execution logic.
Audit Metadata