The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends executing npx testflight, which triggers the download and execution of an unverified package from the npm registry. This package is not part of the official Expo or Apple toolchains and has not been maintained for many years, posing a security risk through the execution of untrusted code.
[COMMAND_EXECUTION]: The skill's documentation identifies npx testflight as a standard shortcut for iOS TestFlight submissions. This is inaccurate as the official and supported method for Expo projects is using the EAS CLI (eas submit). Recommending non-standard commands for sensitive deployment tasks is a significant security concern.
[COMMAND_EXECUTION]: The attribution metadata in ATTRIBUTION.md incorrectly claims the skill is sourced from github.com/expo/skills. This repository does not exist under the Expo organization, and the deceptive claim may lead users to trust the skill's instructions and external packages more than is warranted.

expo-deployment