The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill repeatedly suggests using npx testflight as a shortcut for iOS submissions. This package is not an official Expo or Apple tool and exists as an unmaintained third-party package on the public npm registry, creating a risk of executing untrusted code.\n- [PROMPT_INJECTION]: The skill demonstrates an architectural pattern in references/app-store-metadata.md for fetching App Store metadata from an external API without validation, creating a surface for indirect prompt injection.\n
Ingestion points: The fetch operation within the store.config.js example in references/app-store-metadata.md.\n
Boundary markers: None; the fetched data is directly merged into the configuration object without delimiters or warnings.\n
Capability inventory: The skill utilizes eas metadata:push to apply these configurations to the live App Store listing.\n
Sanitization: The implementation lacks schema validation or sanitization of the external data before it is processed.

expo-deployment