add-expo-notifications-fcm
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
npm execcommand to install necessary libraries (expo-notifications,expo-device). This is a standard project setup procedure in the Expo development environment. - [EXTERNAL_DOWNLOADS]: The skill downloads official packages from the NPM registry and interacts with the well-known Expo Push API at
https://exp.host/--/api/v2/push/sendto send push notifications. - [INDIRECT_PROMPT_INJECTION]: The skill includes code that processes data from incoming push notification payloads to handle application navigation.
- Ingestion points: Remote notification payload data received in
SKILL.mdviaaddNotificationResponseReceivedListener. - Boundary markers: The code uses structured data access via the
responseobject. - Capability inventory: Navigates the application UI using
router.push. - Sanitization: The implementation mitigates risks by validating the extracted data against a predefined whitelist (
notificationRoutes) before taking action.
Audit Metadata