eas-update-insights

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute official Expo CLI commands (eas update:list, eas update:insights, eas channel:insights). These are standard operations for developers using the Expo ecosystem and are constrained to the eas command namespace.
  • [DATA_EXPOSURE]: The skill processes aggregate application metrics (crash rates, install counts, unique user counts). It does not access sensitive local files (like .ssh, .env, or .aws/credentials) or hardcoded secrets. The data is retrieved from a trusted service (expo.dev) via the official CLI.
  • [SAFE]: All external references point to official Expo documentation patterns and schemas. The skill's stated purpose (monitoring rollout health) aligns perfectly with its implementation. No obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 06:06 AM