eas-update-insights
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute official Expo CLI commands (eas update:list,eas update:insights,eas channel:insights). These are standard operations for developers using the Expo ecosystem and are constrained to theeascommand namespace. - [DATA_EXPOSURE]: The skill processes aggregate application metrics (crash rates, install counts, unique user counts). It does not access sensitive local files (like
.ssh,.env, or.aws/credentials) or hardcoded secrets. The data is retrieved from a trusted service (expo.dev) via the official CLI. - [SAFE]: All external references point to official Expo documentation patterns and schemas. The skill's stated purpose (monitoring rollout health) aligns perfectly with its implementation. No obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were found.
Audit Metadata