The Agent Skills Directory

[SAFE]: The skill provides a Python script (scripts/init-expo.py) and markdown templates to automate the creation of Expo mobile applications. The script is designed to write project files to a local directory and does not perform network exfiltration or execute untrusted remote code.
[INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided application briefs and feature requests to determine project structure. The script includes a safety check to ensure the target root directory is within the current working directory (unless the --allow-outside flag is explicitly provided). It also performs basic sanitization by slugifying names used for files and identifiers. The skill instructions mandate user confirmation before overwriting existing files, providing a human-in-the-loop boundary.
[EXTERNAL_DOWNLOADS]: Project configurations generated by the skill reference well-known, established packages in the React Native ecosystem (such as Expo SDK, React Native, and Better Auth). These dependencies are specified with exact version pins to ensure supply chain consistency and security.
[COMMAND_EXECUTION]: Static analysis flagged the use of subprocess.run within the test suite (tests/test_init_expo.py). This is a standard and safe implementation for unit testing the CLI script's functionality by spawning a test process in a controlled temporary directory.

expo-architect