native-data-fetching
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation on secure data fetching and authentication. It specifically warns against using insecure storage (AsyncStorage) for sensitive tokens, recommending the encrypted 'expo-secure-store' instead.
- [SAFE]: The skill includes clear instructions on environment variable security, distinguishing between 'EXPO_PUBLIC_' variables (visible in the client bundle) and server-side secrets (non-prefixed), which prevents accidental exposure of API keys.
- [SAFE]: The 'expo-router-loaders.md' reference explicitly advises developers to validate and sanitize user-provided inputs from URL parameters and query strings before using them in API calls or database queries, addressing potential indirect injection or exploitation surfaces in user applications.
- [SAFE]: All external libraries referenced, such as React Query, NetInfo, and Expo SecureStore, are standard, well-established packages within the mobile development ecosystem.
Audit Metadata