expo-dom
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references a feedback utility,
submit-expo-feedback@latest, to be executed vianpx. This tool is intended for user-initiated feedback and originates from the vendor's own ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the integration and rendering of arbitrary React web components within native webviews. This pattern creates an attack surface where instructions embedded in web content could potentially influence the agent's behavior.
- Ingestion points: Ingests user-provided React components and third-party web library code as illustrated in
SKILL.md. - Capability inventory: Capabilities include rendering and executing JavaScript within mobile webview contexts (
WKWebViewandWebView). - Boundary markers: The skill relies on standard Expo DOM component isolation for security boundaries.
- Sanitization: No specific input sanitization or validation routines are documented for the content processed by the DOM components.
Audit Metadata