eas-update
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses official CLI tools like
expoandeas-clito perform update configuration, publishing, and debugging tasks. - [EXTERNAL_DOWNLOADS]: Fetches and runs official Expo packages (
expo-updates,eas-cli,submit-expo-feedback) from the NPM registry vianpx. These are recognized vendor resources and are safe within this context. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill inspects project configuration files such as
package.json,eas.json, and native app configs. - Boundary markers: None defined for reading project files; the skill relies on structural data.
- Capability inventory: Uses subprocess execution for EAS tasks and feedback submission.
- Sanitization: Standard parameter handling by vendor-provided CLI tools is utilized.
Audit Metadata