create-package

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a legitimate technical guide for developers working on the gluestack-ui project. It outlines standard patterns for component creation, accessibility hooks, and utility functions.
  • [COMMAND_EXECUTION]: The workflow suggests using standard package management and build commands such as yarn build, yarn link, and npx expo start. These are appropriate for the skill's stated purpose of local package development.
  • [EXTERNAL_DOWNLOADS]: References to external dependencies include well-known libraries like react, react-native, @react-aria, and @react-stately. These are standard ecosystem components and represent no inherent risk.
  • [DYNAMIC_EXECUTION]: Mention of a local build script scripts/generate-barrel-exports.js is a common practice in JavaScript monorepos for managing exports and does not constitute a security threat.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 01:53 PM
Security Audit — agent-trust-hub — create-package