cometchat-native-calls
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard development workflows for implementing voice and video calling features using the CometChat SDK and well-known React Native libraries.
- [EXTERNAL_DOWNLOADS]: Includes instructions to download the '@cometchat/calls-lib-webrtc' library directly from the vendor's Cloudsmith registry. This is an expected and documented dependency for the SDK's WebRTC functionality.
- [COMMAND_EXECUTION]: Provides routine shell commands for package installation and project build processes, such as 'npm install', 'pod install', and 'adb reverse', which are standard in the React Native development ecosystem.
- [DATA_EXFILTRATION]: Outlines the necessary process of registering device push tokens with a remote API to enable VoIP notification functionality. This is a core feature of the calling integration and uses standard patterns for token registration.
- [CREDENTIALS_UNSAFE]: Encourages the secure management of API keys and private certificates through environment variables and .env files, avoiding the risks associated with hardcoding sensitive information.
Audit Metadata