expo-react-native-weapon
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates a strong security posture by including specific directives that prevent common vulnerabilities. Directive 5 explicitly mandates the use of 'expo-secure-store' for all sensitive data (tokens, secrets) and prohibits the use of insecure storage like 'AsyncStorage' or inlining secrets via environment variables.
- [SAFE]: The guides and templates (such as 'app.config.ts' and 'eas.json') use safe placeholders and provide clear warnings against including 'newArchEnabled' flags on modern SDK versions (SDK 55+), which prevents configuration errors.
- [SAFE]: The skill promotes 'Continuous Native Generation' (CNG) through config plugins, which ensures that native project modifications are predictable and regenerable, reducing the risk of manual configuration errors or persistent backdoors in native code.
- [SAFE]: All suggested third-party dependencies and CLI tools are well-known, reputable packages within the Expo and React Native ecosystem, such as 'expo-camera', 'tanstack-query', and 'drizzle-orm'.
Audit Metadata