add-expo-camera
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npm exec --no -- expo install expo-camerato install the required library. This is a standard and safe method for installing packages within the Expo ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill handles external data via the barcode scanner (
onBarcodeScanned). It implements best practices by including a regular expression check (/^[A-Za-z0-9._~-]{1,256}$/) to validate the scanned data before it is used for navigation, mitigating potential injection risks from malicious QR codes. - [EXTERNAL_DOWNLOADS]: The skill references documentation and baselines from
docs.expo.dev, which is the official and well-known documentation site for the Expo framework. - [CREDENTIALS_UNSAFE]: The reference documentation explicitly instructs users not to include sensitive information like API keys, certificates, or environment variables in source code or examples, demonstrating a commitment to secure development practices.
Audit Metadata