react
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as an informational resource, providing a structured list of documentation links for React Native with no executable code or malicious instructions identifying in the provided files.
- [EXTERNAL_DOWNLOADS]: The metadata includes an installation command that retrieves the markdown file from a GitHub repository via curl. This is a standard installation method for deploying skill content and does not involve immediate code execution or suspicious targets.
- [INDIRECT_PROMPT_INJECTION]: The skill introduces a surface for indirect injection by referencing external documentation that the agent might ingest. Evidence chain: (1) Ingestion points: documentation URLs in SKILL.md (2) Boundary markers: absent (3) Capability inventory: browser and web-reading tools (4) Sanitization: absent. The risk is deemed safe as the referenced sources are official and reputable developer documentation.
Audit Metadata