add-foundation-models
Warn
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install a package named
expo-apple-intelligencevianpx expo install. This package is not a recognized official library from the Expo ecosystem or a trusted vendor, posing a risk of dependency confusion or installation of malicious code. - [COMMAND_EXECUTION]: Provides shell commands for package installation and project modification (
npx expo install,npx expo prebuild --clean). These commands alter the local development environment and execute code from the downloaded package.
Audit Metadata