react-native-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill architecture utilizes dynamic routing which ingests untrusted data from the application's navigation state.
- Ingestion points: Dynamic route parameters are retrieved in
app/(tabs)/profile/[id].tsxusing theuseLocalSearchParamshook fromexpo-router. - Boundary markers: The implementation does not include explicit boundary markers or instructions to ignore embedded commands within the dynamic route parameters.
- Capability inventory: The skill patterns include access to persistent secure storage (
expo-secure-store), application state management (@tanstack/react-query), and programmatic navigation controls (router.push). - Sanitization: The provided code snippets demonstrate direct interpolation of dynamic parameters into component props without explicit validation or sanitization logic shown in the examples.
Audit Metadata