expo-examples
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches example project files and metadata from the official Expo repository on GitHub.
- Evidence: Uses
gh apito query repository contents andcurlto retrieve raw file content fromraw.githubusercontent.com/expo/examples. - Evidence: Uses
git cloneandnpx degitto download example directories. - [INDIRECT_PROMPT_INJECTION]: Processes content from external GitHub files, creating a potential surface for indirect prompt injection.
- Ingestion points: File contents retrieved from the
expo/examplesrepository viaghandcurl(e.g., source code, READMEs). - Boundary markers: Not present; the instructions do not explicitly define markers to separate retrieved code from agent instructions.
- Capability inventory: The skill has the ability to execute shell commands (
gh,git,npx) and read/write to the local filesystem. - Sanitization: No explicit sanitization or validation of the retrieved content is performed before the agent processes it.
- [COMMAND_EXECUTION]: Utilizes various command-line utilities to interact with the repository and manage files.
- Evidence: Employs
gh,git,npx, andcurlto list files, download data, and create new projects.
Audit Metadata