expo-examples
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches example code, configuration, and dependencies from the official Expo GitHub repository (github.com/expo/examples) and executes them using npx, git, and bun to scaffold or integrate project features.
- [INDIRECT_PROMPT_INJECTION]: Processes external project files (README.md, package.json, app.json) from the expo/examples repository to provide integration guidance, creating a surface for potential injection.
- Ingestion points: Remote content fetched via gh api, curl, and git clone (SKILL.md).
- Boundary markers: No explicit markers distinguish external code samples from system instructions.
- Capability inventory: Shell execution via gh, git, npx, and bun (SKILL.md).
- Sanitization: External content is interpreted directly without specific sanitization.
Audit Metadata