expo-scaffold
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard project initialization and configuration commands from the React Native ecosystem, such as
npx create-expo-app,npx eas-cli, andnpx gluestack-ui. These are legitimate tools used for their intended purposes as described in the workflow documentation. - [EXTERNAL_DOWNLOADS]: All external URLs and resources point to official documentation domains and package registries, including
expo.dev,nativewind.dev, andgluestack.io. There are no instances of downloading or executing scripts from untrusted third-party sources. - [CREDENTIALS_UNSAFE]: The skill instructions in
SKILL.mdandreferences/eas.mdexplicitly forbid the generation or hardcoding of sensitive metadata, such as account owners, project IDs, or app store credentials, ensuring the agent does not expose or invent sensitive data during the scaffolding process.
Audit Metadata