revopush-setup
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several local utility scripts to automate the integration process.
scripts/detect-project.shperforms read-only inspection of the project structure,scripts/wrap-entry.jsmodifies the application entry point with a built-in backup mechanism, andscripts/verify-integration.shperforms a static completeness check of the native wiring. All scripts are transparent and limited to project configuration tasks. - [EXTERNAL_DOWNLOADS]: The instructions guide the user to install official vendor packages from the npm registry, including
@revopush/react-native-code-pushand@revopush/expo-code-push-plugin. These are necessary components for the stated purpose of the skill and originate from the verified vendor. - [SAFE]: The skill adheres to security best practices by requiring user confirmation for native file edits, using placeholders for deployment keys instead of generating them, and providing a dry-run mode for code modifications. All network references (e.g.,
api.revopush.org) are directed to the vendor's official infrastructure.
Audit Metadata