react-native
Warn
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: Documentation files
scripts/run-and-dev.mdandreferences/getting-started/troubleshooting.mdcontain instructions for executing powerful shell commands: - Use of
kill -9to force-stop processes identified by PID to free up development ports. - Use of
sudo teeto modify system configuration files in/etc/udev/rules.d/and/etc/sysctl.confto configure hardware access and filesystem watcher limits. - Use of
sudo chownto repair ownership of the npm cache directory. - [PRIVILEGE_ESCALATION]: The skill instructs users to use
sudofor administrative tasks such as changing system-wide kernel parameters (inotify limits) and device permissions (udev rules). While these are standard for environment setup, they involve acquiring root-level permissions. - [EXTERNAL_DOWNLOADS]: Several guides, including
references/getting-started/integration-with-existing-apps.mdandreferences/native-development/pure-cxx-modules.md, usecurlto fetch templates, source files, and dependencies from thereactandreact-native-communityGitHub organizations. These are recognized as official and well-known services within the development ecosystem. - [CREDENTIALS_UNSAFE]: The guides for building release versions (
scripts/build-release.md) provide instructions for managing app signing keys and passwords. The skill follows best practices by using placeholders (*****) for secrets and advising users to store them in local files that are not committed to version control.
Audit Metadata