integration-react-native
Fail
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: CRITICAL
Full Analysis
- [CREDENTIALS_SAFE]: The instructions emphasize the use of environment variables for the
POSTHOG_PROJECT_TOKENandPOSTHOG_HOST, explicitly advising against hardcoding sensitive information. - [EXTERNAL_DOWNLOADS]: The skill references standard, trusted developer tools and registries, including NPM for the PostHog SDK and RubyGems for CocoaPods.
- [COMMAND_EXECUTION]: Includes standard commands for React Native project initialization, dependency management, and build processes (e.g.,
npm install,pod install,gradlew clean). - [PRIVILEGE_ESCALATION]: Recommends the standard
sudo gem install cocoapodscommand for macOS environment setup, which is a common practice for this tool. - [METADATA_POISONING]: Although an automated scan flagged
SKILL.mdas malware, the file content is purely instructional and contains no executable code or malicious patterns. The alert is considered a false positive.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata