mobile-ship
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/preflight.mjsfile uses Node.js child process modules to executegitandexpocommands. These are standard operations for validating local project state and build consistency.\n- [REMOTE_CODE_EXECUTION]: The preflight check invokesnpx expo exportto generate a production bundle locally. This is a standard developer practice in the Expo ecosystem to identify build errors before incurring cloud build costs.\n- [SAFE]: The preflight script reads.envand.env.productionfiles to check for the presence of test-prefixed API keys. This functionality serves as a security safeguard to prevent developers from deploying applications with sandbox credentials.
Audit Metadata