The Agent Skills Directory

[METADATA_POISONING]: The skill provides a comprehensive set of synthetic technical specifications and release dates for React Native (up to v0.82) and Expo (up to SDK 54), claiming a 'Last Updated' date in January 2026. These versions do not currently exist. This deceptive content is designed to override the agent's actual knowledge of current software versions, leading it to adopt false premises and enforce non-existent architectural requirements as 'mandatory' or 'critical'.
[EXTERNAL_DOWNLOADS]: The instructions direct the agent to install and upgrade projects to specific, non-existent versions of core libraries, such as react-native@0.81.5 and react@19.2.3. This creates a supply chain attack vector where a malicious actor could pre-register these version strings on public registries (like NPM) to deliver malicious code to users who rely on the agent for dependency management and migration tasks.
[INDIRECT_PROMPT_INJECTION]: The expo-build agent and the check-rn-version.sh script ingest untrusted data from local project configuration files (package.json, app.json, eas.json) into the agent's execution context. The skill lacks sanitization or boundary markers to prevent malicious instructions or malformed data embedded in these external files from influencing the agent's behavior during automated release and diagnostic workflows.

react-native-expo