add-expo-camera

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npm exec --no -- expo install expo-camera to install the required library. This is a standard and safe method for installing packages within the Expo ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles external data via the barcode scanner (onBarcodeScanned). It implements best practices by including a regular expression check (/^[A-Za-z0-9._~-]{1,256}$/) to validate the scanned data before it is used for navigation, mitigating potential injection risks from malicious QR codes.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and baselines from docs.expo.dev, which is the official and well-known documentation site for the Expo framework.
  • [CREDENTIALS_UNSAFE]: The reference documentation explicitly instructs users not to include sensitive information like API keys, certificates, or environment variables in source code or examples, demonstrating a commitment to secure development practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 04:33 PM