expo-brownfield
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the use of several command-line tools including
npx,yarn,node,pod, andadbto initialize projects, manage dependencies, build native artifacts, and troubleshoot device connections. - [PRIVILEGE_ESCALATION]: The documentation mentions using
sudo gem install cocoapodsto install the necessary dependency manager for iOS development. While this uses elevated privileges, it is a standard and expected installation method for this tool. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch and execute packages from the npm registry using
npx, specifically for creating apps (create-expo-app) and building brownfield artifacts (expo-brownfield). - [DYNAMIC_EXECUTION]: Provided build scripts for Gradle (Android) and CocoaPods (iOS) utilize shell command execution (e.g., calling
node) to dynamically resolve the file paths of React Native and Expo modules during the build process. This is a standard integration pattern in the React Native ecosystem.
Audit Metadata