expo-cicd-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration schemas and documentation from official Expo domains (
api.expo.dev) and Expo's public GitHub repositories. These downloads are performed to ensure the agent uses the most up-to-date validation rules and syntax examples, which is consistent with the skill's primary purpose. These sources are well-known and established in the developer community. - [COMMAND_EXECUTION]: The skill utilizes local Node.js scripts (
fetch.jsandvalidate.js) to manage the retrieval of remote resources and the validation of local YAML workflow files. These operations are scoped to the skill's functional requirements. - [SAFE]: No malicious patterns, such as prompt injection, obfuscation, or unauthorized data exfiltration, were detected. The skill uses standard, industry-recognized libraries like
ajvfor JSON schema validation andjs-yamlfor parsing configuration files.
Audit Metadata