expo
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The maintenance script
scripts/check-updates.pyfetches the latest version information for theexpopackage from the official NPM registry (registry.npmjs.org). This is a standard operation for software version checking and uses a well-known service. - [COMMAND_EXECUTION]: The skill includes a utility script that executes local
npmcommands (npm view expo version) to verify the installed version against the latest available. These commands are static and do not process external or user-provided input. - [DATA_EXPOSURE_AND_EXFILTRATION]: The documentation provides best practices for managing sensitive environment variables, specifically warning against exposing secrets in client-side bundles. There are no mechanisms for unauthorized data collection or exfiltration.
Audit Metadata