cometchat-react-native-calls
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
@cometchat/calls-sdk-react-nativepackage, which is the official SDK provided by the vendor. It also lists necessary peer dependencies including@react-native-async-storage/async-storage,react-native-background-timer,react-native-performance,react-native-svg,react-native-url-polyfill, andreact-native-webrtc. All these are well-known, standard libraries used within the React Native community and are fetched from the public NPM registry. - [COMMAND_EXECUTION]: The documentation includes standard development commands such as
npm installfor dependency management andpod installfor iOS native linking. These are routine operations for setting up React Native projects and are presented within the context of developer guidance. - [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill mentions the use of an
authToken, it demonstrates retrieving it locally from the SDK's authenticated session (CometChat.getLoggedinUser())?.getAuthToken()) to authorize call history requests. This follows the vendor's standard security model for API interaction and does not represent unauthorized data access or exfiltration.
Audit Metadata