react-native
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [Data Ingestion Considerations]: The skill is designed to render UI based on JSON specifications, which may be sourced from external APIs or generated by AI models. This creates a surface where external data is processed into rendered components.
- Ingestion points: The
Renderercomponent and theuseUIStreamhook are used to process and fetch external UI specifications. - Boundary markers: No explicit boundary markers for the JSON specs are described, though the library treats data as structured objects.
- Capability inventory: The skill supports state updates via
setStateand user interaction throughPressablecomponents. - Sanitization: The skill incorporates
zodfor schema validation, providing a robust mechanism to verify that incoming specifications conform to expected formats before they are rendered. - [Dynamic Logic in Data]: The library allows for dynamic expressions within the JSON specs, such as conditional logic (
$cond) and state lookups ($state). - Evidence: Documentation details how to use
$condfor conditional prop values and visibility logic. - Context: This behavior is localized to a specialized Domain Specific Language (DSL) for UI logic and does not involve the execution of arbitrary system commands or scripts.
Audit Metadata