expo-migrate-module
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user-provided source code and dependency configurations. While this creates a surface for indirect prompt injection via malicious comments or code structures, the instructions include specific safeguards such as performing a manual inventory of exported items and verifying behavior against existing tests to mitigate accidental obedience to embedded instructions.
- [COMMAND_EXECUTION]: Employs standard developer utilities like
find,grep, andnpmfor project environment discovery. It also utilizes the GitHub CLI (gh) to report missing features to the official Expo repository, a process that is explicitly gated by mandatory user review and approval before any external interaction occurs.
Audit Metadata