expo-deployment
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute powerful CLI commands using the EAS CLI, including 'eas login' for authentication and 'eas build' or 'eas submit' for deploying application artifacts to production environments.
- [DYNAMIC_EXECUTION]: The skill supports the use of 'store.config.js', which allows for arbitrary JavaScript execution to dynamically generate App Store metadata. This includes patterns for fetching configuration data from external APIs at runtime.
- [INDIRECT_PROMPT_INJECTION]: The skill manages and processes large blocks of untrusted text, such as app descriptions and release notes, which are sourced from local files or external services.
- Ingestion points: Store configuration files ('store.config.json') and external localization APIs fetched via JavaScript configuration.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between its instructions and the content of the metadata fields.
- Capability inventory: The agent has access to tools for building and deploying software, providing a path for malicious content to influence deployment outcomes.
- Sanitization: There is no evidence of sanitization or validation of the metadata strings before they are processed by the agent or pushed to store listings.
Audit Metadata