expo-scaffold
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands such as npx create-expo-app, npx expo install, and eas build. These are necessary for the primary purpose of scaffolding projects and use official Expo tools.\n- [EXTERNAL_DOWNLOADS]: The skill downloads project templates and dependencies from the official NPM registry and Expo's GitHub repositories. These are well-known and trusted sources for React Native development.\n- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and merge context from files generated by create-expo-app (e.g., AGENTS.md).\n
- Ingestion points: Scaffolding output files in the generated project root.\n
- Boundary markers: Guidelines provided in references/scaffold-workflow.md to selectively merge only specific technical context.\n
- Capability inventory: Execution of package manager commands and file writing.\n
- Sanitization: Explicit instructions to discard template clutter and conflicting rules.
Audit Metadata