skills/revopush/skills/revopush-setup/Gen Agent Trust Hub

revopush-setup

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several local utility scripts to automate the integration process. scripts/detect-project.sh performs read-only inspection of the project structure, scripts/wrap-entry.js modifies the application entry point with a built-in backup mechanism, and scripts/verify-integration.sh performs a static completeness check of the native wiring. All scripts are transparent and limited to project configuration tasks.
  • [EXTERNAL_DOWNLOADS]: The instructions guide the user to install official vendor packages from the npm registry, including @revopush/react-native-code-push and @revopush/expo-code-push-plugin. These are necessary components for the stated purpose of the skill and originate from the verified vendor.
  • [SAFE]: The skill adheres to security best practices by requiring user confirmation for native file edits, using placeholders for deployment keys instead of generating them, and providing a dry-run mode for code modifications. All network references (e.g., api.revopush.org) are directed to the vendor's official infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 05:05 PM
Security Audit — agent-trust-hub — revopush-setup