add-app-clip
Fail
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEMETADATA_POISONINGEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill recommends executing 'bunx setup-safari' and 'bunx testflight'. These commands download and run arbitrary code from the public package registry. These are not standard tools in the Expo or React Native ecosystems.
- [CREDENTIALS_UNSAFE]: The 'setup-safari' tool is explicitly described as logging the user into their Apple Developer account. Instructing users to provide credentials to an unverifiable third-party package is a high-risk pattern for credential exfiltration.
- [METADATA_POISONING]: The skill's frontmatter claims a source of 'expo/skills' and labels the skill as 'official', which contradicts the provided author context ('sickn33'). This deceptive metadata could lead users to trust the non-standard tools recommended.
- [EXTERNAL_DOWNLOADS]: The skill directs users to 'sosumi.ai' for critical documentation and configuration guidelines instead of official Apple or Expo developer resources.
Recommendations
- AI detected serious security threats
Audit Metadata