create-package
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for developers working on the gluestack-ui project. It outlines standard patterns for component creation, accessibility hooks, and utility functions.
- [COMMAND_EXECUTION]: The workflow suggests using standard package management and build commands such as
yarn build,yarn link, andnpx expo start. These are appropriate for the skill's stated purpose of local package development. - [EXTERNAL_DOWNLOADS]: References to external dependencies include well-known libraries like
react,react-native,@react-aria, and@react-stately. These are standard ecosystem components and represent no inherent risk. - [DYNAMIC_EXECUTION]: Mention of a local build script
scripts/generate-barrel-exports.jsis a common practice in JavaScript monorepos for managing exports and does not constitute a security threat.
Audit Metadata