react-native

Warn

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: Documentation files scripts/run-and-dev.md and references/getting-started/troubleshooting.md contain instructions for executing powerful shell commands:
  • Use of kill -9 to force-stop processes identified by PID to free up development ports.
  • Use of sudo tee to modify system configuration files in /etc/udev/rules.d/ and /etc/sysctl.conf to configure hardware access and filesystem watcher limits.
  • Use of sudo chown to repair ownership of the npm cache directory.
  • [PRIVILEGE_ESCALATION]: The skill instructs users to use sudo for administrative tasks such as changing system-wide kernel parameters (inotify limits) and device permissions (udev rules). While these are standard for environment setup, they involve acquiring root-level permissions.
  • [EXTERNAL_DOWNLOADS]: Several guides, including references/getting-started/integration-with-existing-apps.md and references/native-development/pure-cxx-modules.md, use curl to fetch templates, source files, and dependencies from the react and react-native-community GitHub organizations. These are recognized as official and well-known services within the development ecosystem.
  • [CREDENTIALS_UNSAFE]: The guides for building release versions (scripts/build-release.md) provide instructions for managing app signing keys and passwords. The skill follows best practices by using placeholders (*****) for secrets and advising users to store them in local files that are not committed to version control.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 5, 2026, 01:10 AM