json-render-react-native
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFE
Full Analysis
- Dynamic Expression Evaluation: The skill utilizes a logic-driven approach to resolve prop values at runtime (e.g., using
$cond,$state, and$bindState). This allows for highly interactive and data-driven UIs by interpreting instructions directly from the JSON spec. - Indirect Prompt Injection Surface: As a renderer for JSON specifications that may originate from AI models or external APIs, the skill acts as an interface for untrusted data. While this is the intended use case, it is a point where developers should ensure that inputs are validated or constrained within the application's security context.
- State Management and Data Binding: The library includes built-in mechanisms for state synchronization through
StateProvideranduseBoundProp. These features facilitate controlled data flow between the UI components and the underlying data model.
Audit Metadata