skills/khadinakbarlabs/expo-mobile-app-builder/add-google-signin-credential-manager/Gen Agent Trust Hub
add-google-signin-credential-manager
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to assist with mobile authentication tasks, creating an attack surface where instructions embedded in user-provided code or external project data could influence the agent's behavior.
- Ingestion points: User queries regarding auth implementation and application configuration files (SKILL.md).
- Boundary markers: None explicitly defined to delimit user input from agent instructions.
- Capability inventory: The skill facilitates command execution via
npm execfor package installation and code generation. - Sanitization: No specific sanitization or validation of user-provided identifiers (e.g., client IDs) is mentioned beyond placeholders.
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of external Node.js packages.
- Evidence: Installation of
@react-native-google-signin/google-signinvianpm execand usage ofgoogle-auth-libraryin backend examples. - Context: These are standard, well-known libraries for the stated purpose of Google authentication.
Audit Metadata