use-dom
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [SAFE] (SAFE): The file is purely educational documentation for a legitimate Expo feature. The code samples provided are standard React/TypeScript and follow best practices for the Expo ecosystem.- [Indirect Prompt Injection] (INFO): The documentation describes passing data (props) into a WebView environment. While this creates a boundary where untrusted data could interact with code, the documentation correctly notes that only serializable data is passed and provides examples for UI-centric libraries (charts, syntax highlighting). This is a description of a platform feature, not a malicious implementation.- [Capability Inventory] (INFO): The examples show how to expose native functionality (like
Alertor navigation) to the WebView. These are standard integration patterns for hybrid applications.
Audit Metadata