ping-orchestration-react-native-sdk

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs various packages from the @ping-identity NPM scope (e.g., @ping-identity/rn-journey, @ping-identity/rn-oidc, @ping-identity/rn-push). These are official vendor libraries from a well-known identity service.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform standard development tasks such as initializing React Native projects (npx react-native init), installing dependencies (npm install), and running the application on simulators/emulators (npx react-native run-ios). These operations are consistent with the skill's primary purpose.
  • [PROMPT_INJECTION]: The skill includes a feature to analyze a user-provided 'Journey export JSON' to identify required callbacks and pre-configure the project. While this ingests untrusted data, the analysis is used for template selection and does not bypass safety constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 05:42 PM
Security Audit — agent-trust-hub — ping-orchestration-react-native-sdk