expo-architect

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/init-expo.py

No clear malware or data exfiltration is evident. The main security issue is unsafe handling of user-controlled tab names in output paths, creating a potential arbitrary file-write/path-traversal risk when running the generator. Unescaped labels can also inject code into generated source. The supplied fragment appears syntactically incomplete, limiting execution-level assessment.

Confidence: 97%Severity: 65%
Audit Metadata
Analyzed At
Oct 7, 2026, 04:48 PM
Package URL
pkg:socket/skills-sh/shipshitdev%2Fskills%2Fexpo-architect%2F@fa2c314819898f000a15b2bc51b44deb563067ba95cd9137b549b424a252d544