add-expo-notifications
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx expo install, which is the standard, safe method for managing dependencies in an Expo project to ensure SDK version compatibility. - [DATA_EXFILTRATION]: The skill includes code to register push tokens by sending them to a local
/api/register-pushendpoint. This is a standard mobile development pattern for enabling push notifications and does not involve sending data to untrusted third-party domains. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by providing placeholders for configuration and explicitly stating in the documentation that tokens, API keys, and certificates must not be stored in source code or examples.
Audit Metadata