limrun-expo-development
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the vendor's 'lim' CLI and standard 'npx' commands to perform builds, manage simulators, and start the development server. These operations are consistent with the skill's stated purpose and do not involve arbitrary command injection risks.- [EXTERNAL_DOWNLOADS]: The skill automatically installs the 'expo-dev-client' package via 'npx expo install' if it is missing from the project. This is a standard dependency for Expo development builds and originates from a trusted registry.- [DATA_EXPOSURE_EXFILTRATION]: A network request is made to '127.0.0.1:4040' to retrieve local tunnel information from ngrok. This targets a whitelisted host (localhost) for legitimate development purposes and does not pose a risk of sensitive data exfiltration to external third-party domains.
Audit Metadata