react-native-state

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The validation script scripts/validate.py performs local filesystem checks to ensure the skill structure is correct. It uses yaml.safe_load() to parse configuration files, which prevents arbitrary code execution during parsing.
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill does not perform any remote downloads or automated package installations. References to industry-standard libraries like Zustand and Redux Toolkit are for educational purposes.
  • [PROMPT_INJECTION] (SAFE): No instructions attempting to override agent behavior, bypass safety filters, or extract system prompts were found in the markdown content or metadata.
  • [DATA_EXFILTRATION] (SAFE): No hardcoded credentials, sensitive file access (e.g., SSH keys, AWS creds), or network operations were detected in any of the files.
  • [DYNAMIC_EXECUTION] (SAFE): The skill contains no use of eval(), exec(), or other dynamic code generation techniques. All logic is static and verifiable.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:53 PM