expo-deployment-v55

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous commands for the eas-cli and expo-cli tools to manage builds, submissions, and deployments.
  • [EXTERNAL_DOWNLOADS]: The skill uses npm install and npx to fetch the eas-cli and testflight packages from the NPM registry.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes npx for executing packages and includes examples of dynamic configuration files (store.config.js) that can perform network requests to fetch metadata at runtime.
  • [CREDENTIALS_UNSAFE]: The skill handles highly sensitive credentials, including Apple IDs, Google Service Account keys, and App Store Connect API keys, while providing guidance on using environment variables and secrets for safe storage.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 11:20 AM
Security Audit — agent-trust-hub — expo-deployment-v55