add-expo-notifications

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, security vulnerabilities, or unauthorized data access were detected. The skill provides legitimate implementation details for Expo's notification system.
  • [EXTERNAL_DOWNLOADS]: The skill uses official, well-known Node.js packages (expo-notifications, expo-device) from the Expo ecosystem. These are standard dependencies for the described functionality.
  • [CREDENTIALS_SAFE]: The documentation includes explicit security guidance in references/01-expo-sdk-54.md, advising users to keep sensitive credentials like API keys, certificates, and .env values out of source code and logs.
  • [COMMAND_EXECUTION]: Uses the standard npm exec --no -- expo install command to manage project dependencies, which is a common and safe practice for Expo development.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 04:31 PM