upgrading-expo
Fail
Audited by Snyk on Oct 9, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (medium risk: 0.30). The instruction in
references/new-architecture.mdincludes an execution command (bunx xcobra expo eval) that downloads and executes an untrusted package (xcobra) from the npm registry viabunx.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata