add-expo-notifications-fcm
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs the user to install official packages (
expo-notifications,expo-device) using the standardnpx expo installcommand. - [SAFE]: Data handled from push notifications is validated against a static whitelist of routes (
notificationRoutes) before being used for navigation, mitigating potential indirect injection risks. - [SAFE]: The provided network request targets the official Expo Push API (
exp.host), which is a well-known and trusted service for this functionality. - [SAFE]: No hardcoded credentials, obfuscated code, hidden URLs, or unauthorized privilege escalation attempts were detected.
Audit Metadata