expo-api-routes
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a documentation and template provider for building server-side logic in mobile applications, posing no direct security risk to the agent or host environment.
- [SAFE]: Security best practices are followed by instructing developers to use
process.envfor sensitive credentials such asOPENAI_API_KEYandTURSO_AUTH_TOKEN, rather than hardcoding them. - [SAFE]: The documentation includes explicit security rules, such as "NEVER expose API keys or secrets in client code" and "ALWAYS validate and sanitize user input."
- [SAFE]: Network operations described in the examples target well-known and trusted services like OpenAI and Turso, or local development endpoints.
- [SAFE]: Package installations (e.g.,
eas-cli) and library imports (e.g.,@libsql/client) refer to official, well-known tooling for the Expo ecosystem.
Audit Metadata