expo-ui
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local utility script,
scripts/list-components.js, to inspect the available components and modifiers in the project's@expo/uiinstallation. This is a standard developer convenience to provide context to the AI agent.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installing the@expo/uipackage vianpx expo install, which is the standard procedure for Expo projects. It also references official documentation fromdocs.expo.devand Material Design guidelines, which are well-known and trusted sources.\n- [INDIRECT_PROMPT_INJECTION]: Thelist-components.jsscript reads from the localnode_modules/@expo/uidirectory to generate its output, creating a potential surface for indirect prompt injection if the installed package were compromised. However, the script only extracts structured component metadata.\n - Ingestion points:
scripts/list-components.jsreadspackage.jsonand.d.tsfiles from the project'snode_modules/@expo/uifolder.\n - Boundary markers: The script output does not include explicit delimiters or instructions to ignore embedded content.\n
- Capability inventory: The script extracts component and modifier names and JSDoc summaries to provide context to the agent.\n
- Sanitization: The script uses regex to filter for specific TypeScript export patterns and JSDoc blocks, limiting what content is ingested.
Audit Metadata