react-native-expo
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive technical guide for Expo development. It includes legitimate implementation patterns for data fetching, UI building, and CI/CD workflows using EAS.
- [DATA_EXPOSURE]: The skill explicitly advises against exposing secrets in client-side bundles (using
EXPO_PUBLIC_prefix) and provides instructions on usingexpo-secure-storefor sensitive tokens andeas env:createfor server-side secrets. These are standard security best practices. - [REMOTE_CODE_EXECUTION]: All commands provided (e.g.,
npx expo install,eas build) are standard Expo CLI operations. There are no patterns involving the download or execution of untrusted external scripts. - [COMMAND_EXECUTION]: Shell commands described in the documentation (e.g., EAS builds, local simulator installation) are routine development tasks and are not triggered automatically or used for malicious purposes.
Audit Metadata