upgrading-expo

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands such as npx expo install, npx expo-doctor, rm -rf node_modules, and pod install. These are routine operations for managing and upgrading React Native/Expo projects.- [EXTERNAL_DOWNLOADS]: The skill uses npx expo install to download and update project dependencies from the official npm registry. It also references official documentation and resources from expo.dev and exp.host.- [REMOTE_CODE_EXECUTION]: The skill facilitates automated code modification using npx expo-codemod, which fetches and runs scripts to assist in migrating navigation imports. This is an official migration path provided by Expo.- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface by processing and acting upon project configuration files and application source code.
  • Ingestion points: Project configuration files (package.json, app.json, postcss.config.js, metro.config.js) and application source code (via expo-codemod).
  • Boundary markers: Not explicitly present in the instructions.
  • Capability inventory: Shell command execution via npx, file system cleanup (rm -rf), and native project regeneration (npx expo prebuild).
  • Sanitization: Not present, as the tool is designed to process and modify these files directly.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 06:07 AM