expo
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses
npx create-expo-appandnpx expocommands to initialize and manage projects. These commands fetch and execute scripts from the public npm registry, which is standard behavior for modern JavaScript development environments. - [INDIRECT_PROMPT_INJECTION]: The provided code examples demonstrate how to handle dynamic routing by ingesting user-supplied search parameters (
id) usinguseLocalSearchParams. While this represents an external data entry point in the resulting application, it is a fundamental architectural pattern for mobile navigation and follows standard React Native practices. - [EXTERNAL_DOWNLOADS]: The code examples reference placeholder images from
picsum.photos, a well-known service for developer mockups, and provide links to official Expo documentation.
Audit Metadata