limrun-expo-development
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
limCLI,npx expo, andadbto manage the development lifecycle, including building assets and establishing tunnels. These are appropriate tools for the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: Standard dependencies like
expo-dev-clientand@expo/ngrokare installed via official package managers, which is normal for React Native projects. - [DYNAMIC_EXECUTION]: An inline Node.js command is used to safely encode URLs for deep linking. This does not introduce untrusted code or remote execution risks.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests application metadata from
app.jsonandpackage.jsonto configure the build environment. This surface is managed through standard tooling and is inherent to the development process. - Ingestion points: Reads project config files via
npx expo config. - Boundary markers: Uses structured output and standard shell variables.
- Capability inventory: Build, upload, and device management via
limCLI. - Sanitization: Employs standard CLI usage patterns.
Audit Metadata