expo-skill-eval
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell scripts and Python orchestrators to manage the evaluation lifecycle (workspace creation, fixture setup, app execution, and screenshot capture).
- Execution is restricted to the skill's own scripts directory and specific temporary workspace paths (/tmp/expo-skill-eval-* and /private/tmp/expo-skill-eval-*).
- Tools used include
xcrun simctlfor iOS simulators,adbfor Android emulators, andexpo-clifor app management. - [EXTERNAL_DOWNLOADS]: The skill downloads necessary tools and project templates to facilitate the evaluation environment.
- Fetches the latest Expo SDK version and templates from the official npm registry using
bunx create-expo-app. - Downloads the Chromium browser via
playwrightfor web-based rendering evaluations. - All downloads target well-known, official package registries (npm/pypi) or reputable technology providers (Microsoft Playwright).
Audit Metadata