nitro-fetch
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references official library packages such as
react-native-nitro-fetch,react-native-nitro-websockets, andreact-native-nitro-modulesfrom NPM, and provides links to the vendor's official GitHub repository atgithub.com/margelo/react-native-nitro-fetchfor source code and examples. - [COMMAND_EXECUTION]: Instructions include standard development commands for environment setup and project building, including
npm install,pod install, and./gradlewbuild processes, which are expected for React Native library integration. - [PERSISTENCE]: The skill explains the usage of
prefetchOnAppStartandprewarmOnAppStart, which use native bootstrap mechanisms to persist and replay networking tasks during application cold starts. This is a primary performance feature of the library and the documentation provides explicit security best practices, such as purging the queue upon user logout to prevent credential reuse. - [INDIRECT_PROMPT_INJECTION]: As a networking library, the skill provides tools for ingesting external data via HTTP and WebSockets, which constitutes a potential attack surface for the consuming application. The documentation focus is purely technical and does not facilitate malicious exploitation.
Audit Metadata