skills/eho/agent-skills/expo-scaffold/Gen Agent Trust Hub

expo-scaffold

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard project initialization and configuration commands from the React Native ecosystem, such as npx create-expo-app, npx eas-cli, and npx gluestack-ui. These are legitimate tools used for their intended purposes as described in the workflow documentation.
  • [EXTERNAL_DOWNLOADS]: All external URLs and resources point to official documentation domains and package registries, including expo.dev, nativewind.dev, and gluestack.io. There are no instances of downloading or executing scripts from untrusted third-party sources.
  • [CREDENTIALS_UNSAFE]: The skill instructions in SKILL.md and references/eas.md explicitly forbid the generation or hardcoding of sensitive metadata, such as account owners, project IDs, or app store credentials, ensuring the agent does not expose or invent sensitive data during the scaffolding process.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 11:54 PM
Security Audit — agent-trust-hub — expo-scaffold