nitro-fetch

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation references official library packages such as react-native-nitro-fetch, react-native-nitro-websockets, and react-native-nitro-modules from NPM, and provides links to the vendor's official GitHub repository at github.com/margelo/react-native-nitro-fetch for source code and examples.
  • [COMMAND_EXECUTION]: Instructions include standard development commands for environment setup and project building, including npm install, pod install, and ./gradlew build processes, which are expected for React Native library integration.
  • [PERSISTENCE]: The skill explains the usage of prefetchOnAppStart and prewarmOnAppStart, which use native bootstrap mechanisms to persist and replay networking tasks during application cold starts. This is a primary performance feature of the library and the documentation provides explicit security best practices, such as purging the queue upon user logout to prevent credential reuse.
  • [INDIRECT_PROMPT_INJECTION]: As a networking library, the skill provides tools for ingesting external data via HTTP and WebSockets, which constitutes a potential attack surface for the consuming application. The documentation focus is purely technical and does not facilitate malicious exploitation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:45 AM