limrun-expo-development

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the lim CLI, npx expo, and adb to manage the development lifecycle, including building assets and establishing tunnels. These are appropriate tools for the skill's stated purpose.
  • [EXTERNAL_DOWNLOADS]: Standard dependencies like expo-dev-client and @expo/ngrok are installed via official package managers, which is normal for React Native projects.
  • [DYNAMIC_EXECUTION]: An inline Node.js command is used to safely encode URLs for deep linking. This does not introduce untrusted code or remote execution risks.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests application metadata from app.json and package.json to configure the build environment. This surface is managed through standard tooling and is inherent to the development process.
  • Ingestion points: Reads project config files via npx expo config.
  • Boundary markers: Uses structured output and standard shell variables.
  • Capability inventory: Build, upload, and device management via lim CLI.
  • Sanitization: Employs standard CLI usage patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 12:02 PM