mobile-app-builder-ios-android
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions emphasize defensive security practices by explicitly requiring that credentials for services like Expo, Apple, Google, Firebase, and Supabase be kept out of source code, prompts, and logs.
- [SAFE]: The workflow incorporates human-in-the-loop verification, requiring user confirmation before performing actions involving builds, uploads, submissions, or financial expenditure.
- [SAFE]: Documentation references are restricted to official resources (docs.expo.dev), and dependency management instructions use standard tools (npx expo install) without introducing unverifiable third-party sources.
- [SAFE]: No obfuscation, prompt injection attempts, or persistence mechanisms were detected in the skill instructions or configuration files.
Audit Metadata