react-pro-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational resources and standard developer utilities. The included scripts for fetching and validating Expo workflows interact with official service endpoints and use best practices for local caching and validation.
- [PROMPT_INJECTION]: The
validate.jsscript processes external YAML files. While this creates a surface for processing untrusted data (indirect prompt injection), the script performs schema validation using standard libraries and does not execute the data content. - [EXTERNAL_DOWNLOADS]: The skill contains logic to fetch an official configuration schema from Expo's API. This is a routine operation for CI/CD validation tools and targets a well-known service provider.
Audit Metadata