integrating-superwall-expo
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill instructions and associated files do not contain any malicious patterns such as prompt injection, privilege escalation, or persistence mechanisms. The logic is focused on standard library setup and configuration validation.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of legitimate, well-known mobile development packages including
expo-superwall,expo-build-properties, andreact-native-purchases(RevenueCat) from official registries. These downloads are considered safe as they target trusted services and official SDKs necessary for the skill's primary purpose.\n- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill correctly demonstrates usingprocess.env.EXPO_PUBLIC_SUPERWALL_IOS_KEYand similar placeholders for managing API keys, which is a standard security practice for Expo applications.\n- [COMMAND_EXECUTION]: The includedscripts/check-setup.mjsscript performs safe, local file-system operations to validate project dependencies and platform settings. It avoids dangerous practices likeeval()or spawning shell commands with untrusted input.
Audit Metadata