expo-cicd-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches workflow schemas and documentation from trusted Expo domains (api.expo.dev and raw.githubusercontent.com/expo). These operations are for resource retrieval and do not involve execution of untrusted remote code.
- [COMMAND_EXECUTION]: The skill uses local Node.js scripts (
fetch.jsandvalidate.js) to process documentation and validate YAML files. These scripts operate on well-defined inputs and use standard libraries (Ajv, js-yaml) for parsing. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data (JSON schemas and Markdown documentation) to inform its responses. While this presents an ingestion surface, the risk is mitigated as the data comes from official, high-reputation Expo repositories and is used for validation and reference rather than direct command construction.
- [SAFE]: Secret management instructions in the skill body appropriately advise users on workflow structure without requesting or hardcoding sensitive credentials. All external references target well-known service providers.
Audit Metadata