upgrade-react-native
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard development and build commands including
npm,yarn,xcodebuild, andnpx expo. These are standard practices for managing dependencies and performing builds/tests in a React Native environment. - [EXTERNAL_DOWNLOADS]: The skill references configuration diffs from the
react-native-community/rn-diff-purgerepository. This is a well-known, established community resource for tracking changes between React Native versions. It also links to documentation for official libraries likereact-native-reanimated. - [INDIRECT_PROMPT_INJECTION]: \n
- Ingestion points: The skill uses version numbers to fetch template files from the
rn-diff-purgerepository (SKILL.md). \n - Boundary markers: No explicit "ignore embedded instructions" warnings are used when processing external templates. \n
- Capability inventory: The skill modifies local project files and executes build/test scripts using
yarn,xcodebuild, and thereact-nativeCLI (SKILL.md). \n - Sanitization: No sanitization is performed on the version strings, though the source is a trusted community repository.
Audit Metadata