building-native-ui

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation of several third-party libraries for 3D graphics and native UI components. Evidence: references/webgpu-three.md explicitly lists react-native-wgpu, three, @react-three/fiber, and wgpu-matrix as required dependencies.
  • [COMMAND_EXECUTION]: The documentation provides standard shell commands for development workflows and building native binaries. Evidence: SKILL.md includes instructions for executing npx expo start, npx expo run:ios, and eas build.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides implementation templates for accessing sensitive device features such as the camera and media library. Evidence: references/media.md contains code using expo-camera and expo-media-library to capture and save media.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines application surfaces that process user input, identifying potential areas for injection if data is not sanitized by the final application. 1. Ingestion points: references/search.md (Stack.SearchBar) and references/controls.md (TextInput). 2. Boundary markers: Not present in the generic code templates. 3. Capability inventory: Sensitive feature access via references/media.md (Camera) and data storage via references/storage.md (SQLite). 4. Sanitization: Not included in the functional UI templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 06:06 AM