expo-cicd-workflows
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches workflow schemas and syntax documentation from official Expo domains (
api.expo.dev) and GitHub repositories (github.com/expo/). These operations are essential for providing the agent with the most current specifications for Expo's CI/CD platform. - [COMMAND_EXECUTION]: Local Node.js scripts are used to manage a local cache of fetched resources and to perform YAML validation against the retrieved JSON schema. These scripts use standard file system operations and established libraries like AJV and js-yaml.
- [PROMPT_INJECTION]: The skill processes external data (MDX documentation and JSON schemas) into the agent's context. While this represents an indirect ingestion surface, the sources are trusted official repositories and the data is used for structural validation and reference rather than as executable instructions.
Audit Metadata