react-native-expo
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill instructions in
SKILL.md(lines 18-19) direct the agent to fetch documentation files fromhttps://docs.expo.dev/llms.txtandhttps://reactnative.dev/llms.txt. - Ingestion Points: Ingests external
.txtdocumentation into the agent's context. - Trust Status: Sources are official domains for Expo and React Native, qualifying for a severity downgrade under the [TRUST-SCOPE-RULE].
- [COMMAND_EXECUTION] (INFO): The skill describes the use of standard development CLI tools including
npx expoandeas-cli. - Evidence:
SKILL.mdandreferences/common-patterns.mdcontain numerous shell command examples. - Capability: While high-capability (can build and run code), the examples are standard boilerplate for mobile development and do not demonstrate malicious intent or unsafe interpolation of untrusted user input.
- [REMOTE_CODE_EXECUTION] (SAFE): No patterns of piping remote scripts to shells (e.g.,
curl | bash) were detected. Thescripts/setup-docs.shfile is a benign shell script used for local environment checks.
Audit Metadata