add-expo-notifications-fcm

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructs the user to install official packages (expo-notifications, expo-device) using the standard npx expo install command.
  • [SAFE]: Data handled from push notifications is validated against a static whitelist of routes (notificationRoutes) before being used for navigation, mitigating potential indirect injection risks.
  • [SAFE]: The provided network request targets the official Expo Push API (exp.host), which is a well-known and trusted service for this functionality.
  • [SAFE]: No hardcoded credentials, obfuscated code, hidden URLs, or unauthorized privilege escalation attempts were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 11:17 PM
Security Audit — agent-trust-hub — add-expo-notifications-fcm