use-dom
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for Expo developers. All code examples demonstrate standard usage of the Expo DOM Components API.
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for passing data from native code to a WebView environment (DOM components). While this creates an ingestion point for external data, the skill correctly advises using serializable props and does not demonstrate unsafe patterns. The inherent risk of cross-context data passing is typical for this technology.
- [DYNAMIC_EXECUTION]: The functionality described involves executing web code within a WebView container on native platforms. This is the intended and documented purpose of the feature, providing a sandboxed environment for web-based libraries.
Audit Metadata