expo-examples

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes commands that fetch and read remote repository code at runtime (e.g., curl https://raw.githubusercontent.com/expo/examples/master/with-stripe/utils/stripe-server.ts and git clone https://github.com/expo/examples.git), so external content can directly influence the agent's behavior by injecting example code/instructions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly maps "payments" to the Expo "with-stripe" example, shows how to read Stripe server code (stripe-server.ts), and provides commands to scaffold or copy the with-stripe example into projects. This is a specific integration pattern for a payment gateway (Stripe), i.e., a tool specifically designed to enable financial operations rather than a generic capability.