upgrading-expo
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Project Maintenance Commands: The skill instructs the agent to execute various maintenance commands such as
npx expo install,npx expo-doctor, and cache-clearing operations likerm -rf node_modules. These are standard procedures for managing React Native and Expo projects during an upgrade. - Dependency Management: Several packages are referenced for installation or migration, including
expo,react-native-worklets, andhermes-compiler. These references align with the official Expo SDK 53-55 upgrade paths and requirements for features like Reanimated and the Hermes engine. - Verification Utilities: The migration guide mentions using
bunx xcobrafor verifying project state. This involves executing an external package from a public registry and performing dynamic evaluation of app properties. While this is a common development pattern, users should ensure they are using trusted versions of such utilities. - Project Data Ingestion: The skill analyzes local configuration files such as
app.jsonandpackage.jsonto suggest specific upgrade steps. This interaction is central to the skill's purpose of automating project maintenance tasks. - Configuration and Schema Updates: The skill provides instructions for updating
app.jsonand cleaning up Babel and Metro configurations. These steps are standard for adopting Expo's managed workflow best practices and the New Architecture.
Audit Metadata