add-live-activity
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for integrating 'expo-live-activity'. All commands (npm install, expo prebuild) and code snippets (Swift, TypeScript) represent standard mobile development workflows.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or sensitive tokens were found. The documentation uses placeholders such as '1234' for order numbers and '' for APNs topics. Furthermore, the 'references/01-expo-sdk-54.md' file includes an explicit 'Credential boundary' section advising developers to never place keys or secrets in source code or examples.
- [EXTERNAL_DOWNLOADS]: The skill installs the 'expo-live-activity' package from a standard registry. It also mentions 'react-native-live-activity' by Voltra as an alternative, which is a recognized community resource.
- [COMMAND_EXECUTION]: The skill uses 'expo prebuild --clean', a standard but impactful command in the Expo ecosystem. The reference documentation correctly identifies this as potentially destructive and advises obtaining user confirmation before execution.
Audit Metadata