expo-nativewind-theme
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard package management commands like
npx expo installfor installing well-known libraries such asnativewindandsonner-native. - [INDIRECT_PROMPT_INJECTION]: The skill reads local project files including
package.json, Babel/Metro configurations, and root layouts. These files represent ingestion points for untrusted data that could influence the agent's generated output, though this is a standard requirement for development-oriented skills to adapt to the user's environment.
Audit Metadata