expo-dom
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for submitting feedback using
npx --yes submit-expo-feedback@latest, which retrieves content from the NPM registry. - [REMOTE_CODE_EXECUTION]: The feedback mechanism utilizes
npxto download and execute thesubmit-expo-feedbackpackage locally. - [COMMAND_EXECUTION]: The documentation includes a shell command for interacting with feedback services related to the Expo framework.
- [PROMPT_INJECTION]: The framework described for DOM components presents a surface for indirect prompt injection where data is passed from native props into a browser context with access to native actions.
- Ingestion points: Data props such as
data,code, andcontentpassed to DOM components as shown inSKILL.md. - Boundary markers: Absent; the documentation does not suggest delimiters or explicit instructions for the agent to ignore instructions embedded in props.
- Capability inventory: DOM components are provided with capabilities to invoke native functions such as
saveData(potential storage write) andshowAlert, as defined inSKILL.md. - Sanitization: Absent; there is no guidance on sanitizing or validating input props before they are rendered or processed within the webview context.
Audit Metadata