stream-react-native
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust credential management flow in
credentials.md, using the officialstreamCLI to fetch API keys and generate tokens securely. It explicitly warns against hardcoding secrets in application code or configuration files.- [EXTERNAL_DOWNLOADS]: The skill fetches documentation manifests and guides from the officialgetstream.iodomain (e.g., inreferences/DOCS.md). These resources are from a well-known service and are integral to providing up-to-date SDK instructions.- [COMMAND_EXECUTION]: Shell commands defined in theallowed-toolsand used throughout the modules (such as inbuilder.mdandreferences/CHAT-REACT-NATIVE.md) are standard for React Native development. They include package installation via npm/yarn/npx and project scaffolding, all of which are appropriate for the skill's stated purpose.- [SAFE]: Project probing commands used inSKILL.mdare read-only and designed to detect the environment (RN CLI vs Expo) to ensure correct configuration, posing no security risk.
Audit Metadata