native-data-fetching
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill promotes secure development practices by instructing the use of
expo-secure-storefor sensitive authentication tokens instead of insecure options likeAsyncStorage. It also provides clear guidance on managing environment variables, warning developers to avoid prefixing secrets withEXPO_PUBLIC_to prevent them from being bundled into the client-side code. - [INDIRECT_PROMPT_INJECTION]: The skill identifies attack surfaces related to processing external data, such as API responses and URL parameters. It includes explicit best practices recommending the validation and sanitization of user input before it is used in database queries or API calls, which helps prevent injection vulnerabilities in applications built using these instructions.
- [COMMAND_EXECUTION]: No dangerous command execution patterns, privilege escalation, or persistence mechanisms were detected. The provided code snippets focus on standard web and mobile development APIs.
Audit Metadata