react-native-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of verified packages from NPM and the retrieval of machine learning models from Software Mansion's HuggingFace repository. These operations target well-known, trusted services for development purposes.
- [COMMAND_EXECUTION]: Instructions include standard developer CLI commands such as
npm install,npx expo prebuild, andnpm start -- --reset-cache. These are used for project initialization and environment maintenance. - [DATA_EXFILTRATION]: Documentation covers legitimate features like audio recording and model caching in the app's documents directory. These implementations utilize standard platform permission models (e.g.,
NSMicrophoneUsageDescription) and do not involve unauthorized data transmission. - [SAFE]: The skill serves as a technical reference guide. It contains no obfuscated code, prompt injection attempts, or malicious persistence mechanisms. It promotes secure coding practices by emphasizing input validation for structured AI outputs and proper resource management.
Audit Metadata