react-native-expo
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- SAFE (SAFE): No malicious patterns detected. The skill contains architectural documentation, migration guides, and diagnostic shell scripts for version detection.
- Indirect Prompt Injection (SAFE): The
check-rn-version.shscript reads data from a project'spackage.jsonto identify dependency versions. While this ingests external data, it is used for local diagnostic output and is necessary for the skill's primary purpose. - Ingestion points: local
package.json(dependencies field) - Boundary markers: Not applicable for terminal-only output
- Capability inventory: Script uses
node,grep,cut, andtrfor string processing; no network or write capabilities - Sanitization: Uses
tr -d '^~'to normalize version strings
Audit Metadata