building-with-eas
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for the
easCLI (Expo Application Services). These are standard operations for mobile development, including project initialization (eas init), build configuration (eas build:configure), and credential management. - [COMMAND_EXECUTION]: In the 'Plugin Tools' section, the skill suggests executing a local script (
node tools/check-version.js). This is presented as a developer utility for version management within a project structure. Users should ensure such scripts are properly audited within their own local repositories. - [SAFE]: The documentation correctly identifies security best practices by advising against hardcoding credentials. It explicitly instructs users to use
eas secretfor sensitive environment variables and provides placeholder templates foreas.jsonandcredentials.jsonrather than actual secrets.
Audit Metadata