command-scaffold-app
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill explicitly instructs the agent to avoid handling or including credentials, API keys, or secrets in any generated output or project files.
- [SAFE]: The provided plan-expo-project.mjs script includes strict regex validation for the project name input, preventing potential command injection or directory traversal attempts through naming.
- [SAFE]: The workflow requires explicit user confirmation before performing sensitive operations such as prebuilds, native builds, or publishing to app stores.
Audit Metadata