revyl-cli-auth-bypass-react-native
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
revylCLI to manage environment variables (revyl global launch-var) and simulate device actions (revyl device navigate). These commands are part of the vendor's provided testing and configuration suite.- [SAFE]: References to therevylCLI,RevylLaunchConfignative modules, and associated tools are associated with the skill author's own infrastructure (RevylAI) and represent expected functionality for this developer tool.- [PROMPT_INJECTION]: The skill processes external deep link URLs, which constitutes an indirect prompt injection surface. However, the implementation includes strong mitigations: it verifies the URL protocol and hostname, validates a token against native launch configuration, and enforces strict allowlists for both user roles and navigation targets to prevent unauthorized access or open redirects.
Audit Metadata