native-data-fetching

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill promotes secure development practices by instructing the use of expo-secure-store for sensitive authentication tokens instead of insecure options like AsyncStorage. It also provides clear guidance on managing environment variables, warning developers to avoid prefixing secrets with EXPO_PUBLIC_ to prevent them from being bundled into the client-side code.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies attack surfaces related to processing external data, such as API responses and URL parameters. It includes explicit best practices recommending the validation and sanitization of user input before it is used in database queries or API calls, which helps prevent injection vulnerabilities in applications built using these instructions.
  • [COMMAND_EXECUTION]: No dangerous command execution patterns, privilege escalation, or persistence mechanisms were detected. The provided code snippets focus on standard web and mobile development APIs.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 06:06 AM