create-react-native-library
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx create-react-native-library@latestto automate the creation of project structures. This is a standard industry tool for React Native development. - [EXTERNAL_DOWNLOADS]: The skill references documentation and resources from established organizations including Callstack (oss.callstack.com), Meta (reactnative.dev), and Margelo (nitro.margelo.com).
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface where the agent reads the existing
package.jsonof a project to determine appropriate linking strategies (e.g., 'link:' vs 'file:'). - Ingestion points: Reads
package.jsonat the project root. - Boundary markers: None explicitly defined for the file content.
- Capability inventory: Executes shell commands via
npx,yarn, andnpmfor installation and scaffolding. - Sanitization: Relies on standard package manager behavior for dependency resolution.
- [REMOTE_CODE_EXECUTION]: While the skill uses
npxto run the scaffolding tool andyarn/npmfor dependency installation, these are the primary intended functions of the skill and utilize established registries.
Audit Metadata