expo-ios-screen-scaffolder
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides boilerplate templates for creating Expo Router screens. Its primary function is to write generated TSX code to the local filesystem (specifically the 'app/' directory) as part of a development workflow.
- [EXTERNAL_DOWNLOADS]: The templates generate code that utilizes official and widely-trusted libraries from the Expo and React Native ecosystems, including '@shopify/flash-list', 'expo-router', 'expo-symbols', and 'expo-haptics'. These dependencies are standard for modern cross-platform mobile development.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by populating templates with user-supplied values.
- Ingestion points: User-provided strings for placeholders such as '{ScreenName}', '{Entity}', and '{Title}' across all TSX templates.
- Boundary markers: None identified; placeholders are directly interpolated into the code structure.
- Capability inventory: File system write access to the 'app/' directory via the agent's scaffolding actions.
- Sanitization: None; the skill relies on the agent's internal safety filters and the developer's review of the generated code.
Audit Metadata