expo-dev-client
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents standard workflows for the official Expo Application Services (EAS) CLI, which is a well-known tool for mobile app development.
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for building, installing, and managing mobile applications using eas, npx, tar, adb, and xcrun. These are standard developer tools used within their intended context.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. Ingestion points: The agent is instructed to read and rely on project configuration files like eas.json in SKILL.md. Boundary markers: No specific delimiters or instructions are provided to separate project data from agent instructions. Capability inventory: The skill utilizes file system access and shell execution for commands like eas build, adb install, and tar in SKILL.md. Sanitization: No explicit sanitization or validation of the ingested project configuration is mentioned. This surface is characteristic of development tools and does not represent an active threat in this context.
Audit Metadata