integrating-superwall-expo

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill instructions and associated files do not contain any malicious patterns such as prompt injection, privilege escalation, or persistence mechanisms. The logic is focused on standard library setup and configuration validation.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of legitimate, well-known mobile development packages including expo-superwall, expo-build-properties, and react-native-purchases (RevenueCat) from official registries. These downloads are considered safe as they target trusted services and official SDKs necessary for the skill's primary purpose.\n- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill correctly demonstrates using process.env.EXPO_PUBLIC_SUPERWALL_IOS_KEY and similar placeholders for managing API keys, which is a standard security practice for Expo applications.\n- [COMMAND_EXECUTION]: The included scripts/check-setup.mjs script performs safe, local file-system operations to validate project dependencies and platform settings. It avoids dangerous practices like eval() or spawning shell commands with untrusted input.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 05:43 PM