expo-tailwind-setup
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides standard development instructions for styling in the Expo ecosystem. All code snippets are routine React Native and Metro configuration boilerplate.
- [EXTERNAL_DOWNLOADS]: The skill fetches several packages from the npm registry using
npx expo install. The dependencies, includingtailwindcss,nativewind, and specific nightly versions ofreact-native-css, are standard for the experimental styling stack described. - [COMMAND_EXECUTION]: Uses
npx expo installfor dependency management. This is the official, secure way to install packages in Expo projects and does not involve arbitrary or hidden commands. - [INDIRECT_PROMPT_INJECTION]: The skill defines component wrappers that process
classNamestrings. While this creates a runtime ingestion point, it is limited to styling properties within the React Native component lifecycle, posing no identified security risk.
Audit Metadata