skills/openai/plugins/upgrading-expo/Gen Agent Trust Hub

upgrading-expo

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Project Maintenance Commands: The skill instructs the agent to execute various maintenance commands such as npx expo install, npx expo-doctor, and cache-clearing operations like rm -rf node_modules. These are standard procedures for managing React Native and Expo projects during an upgrade.
  • Dependency Management: Several packages are referenced for installation or migration, including expo, react-native-worklets, and hermes-compiler. These references align with the official Expo SDK 53-55 upgrade paths and requirements for features like Reanimated and the Hermes engine.
  • Verification Utilities: The migration guide mentions using bunx xcobra for verifying project state. This involves executing an external package from a public registry and performing dynamic evaluation of app properties. While this is a common development pattern, users should ensure they are using trusted versions of such utilities.
  • Project Data Ingestion: The skill analyzes local configuration files such as app.json and package.json to suggest specific upgrade steps. This interaction is central to the skill's purpose of automating project maintenance tasks.
  • Configuration and Schema Updates: The skill provides instructions for updating app.json and cleaning up Babel and Metro configurations. These steps are standard for adopting Expo's managed workflow best practices and the New Architecture.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 11:18 AM
Security Audit — agent-trust-hub — upgrading-expo