building-native-ui
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of several third-party libraries for 3D graphics and native UI components. Evidence:
references/webgpu-three.mdexplicitly listsreact-native-wgpu,three,@react-three/fiber, andwgpu-matrixas required dependencies. - [COMMAND_EXECUTION]: The documentation provides standard shell commands for development workflows and building native binaries. Evidence:
SKILL.mdincludes instructions for executingnpx expo start,npx expo run:ios, andeas build. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides implementation templates for accessing sensitive device features such as the camera and media library. Evidence:
references/media.mdcontains code usingexpo-cameraandexpo-media-libraryto capture and save media. - [INDIRECT_PROMPT_INJECTION]: The skill defines application surfaces that process user input, identifying potential areas for injection if data is not sanitized by the final application. 1. Ingestion points:
references/search.md(Stack.SearchBar) andreferences/controls.md(TextInput). 2. Boundary markers: Not present in the generic code templates. 3. Capability inventory: Sensitive feature access viareferences/media.md(Camera) and data storage viareferences/storage.md(SQLite). 4. Sanitization: Not included in the functional UI templates.
Audit Metadata