expo-brownfield
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides build configuration templates (Gradle scripts and iOS Podfiles) that execute shell commands at build time to resolve package paths and execute build phases.
- Evidence:
settings.gradleandapp/build.gradleinreferences/brownfield-integrated.mduseproviders.execandcommandLineto runnodefor resolving paths to@react-native/gradle-pluginandexpo-modules-autolinking. - Evidence: The iOS
Podfileinreferences/brownfield-integrated.mduses shell execution (backticks) to resolve the path forexpo/package.json. - Evidence: A custom Xcode Run Script phase in
references/brownfield-integrated.mdexecutes shell logic to embed the JavaScript bundle during the build process. - [EXTERNAL_DOWNLOADS]: The skill instructs users to utilize standard package managers to download and install official development tools and libraries.
- Evidence: Instructions in
SKILL.mdand reference files recommend usingnpx create-expo-app,npx expo install, andyarn installto manage project dependencies. - Evidence: Documentation in
references/brownfield-integrated.mdmentionssudo gem install cocoapodsto install the iOS dependency manager. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user context regarding their specific native application architecture to provide tailored integration advice.
- Ingestion points: The skill triggers based on user keywords such as "brownfield", "AAR", and "XCFramework" (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: The skill produces shell commands for project initialization, package installation, and build configuration (references/brownfield-integrated.md, references/brownfield-isolated.md).
- Sanitization: Absent.
Audit Metadata