expo-brownfield
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for installing CocoaPods using
sudo gem install cocoapods. While this involves privilege escalation viasudo, it is a standard and expected step for setting up iOS development environments. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto fetch and execute various development tools, such ascreate-expo-appfor project scaffolding andexpo-brownfieldfor build processing. These are routine operations within the mobile development toolchain. - [DATA_EXFILTRATION]: A feedback mechanism is provided using the
submit-expo-feedbackutility, which transmits user-supplied feedback to an external endpoint. This is explicitly presented as a telemetry and improvement tool for the skill and the framework.
Audit Metadata