revyl-cli-auth-bypass-react-native

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the revyl CLI to manage environment variables (revyl global launch-var) and simulate device actions (revyl device navigate). These commands are part of the vendor's provided testing and configuration suite.- [SAFE]: References to the revyl CLI, RevylLaunchConfig native modules, and associated tools are associated with the skill author's own infrastructure (RevylAI) and represent expected functionality for this developer tool.- [PROMPT_INJECTION]: The skill processes external deep link URLs, which constitutes an indirect prompt injection surface. However, the implementation includes strong mitigations: it verifies the URL protocol and hostname, validates a token against native launch configuration, and enforces strict allowlists for both user roles and navigation targets to prevent unauthorized access or open redirects.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 10:12 PM
Security Audit — agent-trust-hub — revyl-cli-auth-bypass-react-native