react-native

Pass

Audited by Gen Agent Trust Hub on Mar 7, 2026

Risk Level: SAFE
Full Analysis
  • [Data Ingestion Considerations]: The skill is designed to render UI based on JSON specifications, which may be sourced from external APIs or generated by AI models. This creates a surface where external data is processed into rendered components.
  • Ingestion points: The Renderer component and the useUIStream hook are used to process and fetch external UI specifications.
  • Boundary markers: No explicit boundary markers for the JSON specs are described, though the library treats data as structured objects.
  • Capability inventory: The skill supports state updates via setState and user interaction through Pressable components.
  • Sanitization: The skill incorporates zod for schema validation, providing a robust mechanism to verify that incoming specifications conform to expected formats before they are rendered.
  • [Dynamic Logic in Data]: The library allows for dynamic expressions within the JSON specs, such as conditional logic ($cond) and state lookups ($state).
  • Evidence: Documentation details how to use $cond for conditional prop values and visibility logic.
  • Context: This behavior is localized to a specialized Domain Specific Language (DSL) for UI logic and does not involve the execution of arbitrary system commands or scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 7, 2026, 02:43 AM