expo

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The maintenance script scripts/check-updates.py fetches the latest version information for the expo package from the official NPM registry (registry.npmjs.org). This is a standard operation for software version checking and uses a well-known service.
  • [COMMAND_EXECUTION]: The skill includes a utility script that executes local npm commands (npm view expo version) to verify the installed version against the latest available. These commands are static and do not process external or user-provided input.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The documentation provides best practices for managing sensitive environment variables, specifically warning against exposing secrets in client-side bundles. There are no mechanisms for unauthorized data collection or exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — expo