expo-smoke-test
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill derives testing logic from project files which could contain malicious instructions. * Ingestion points: The agent reads
PRODUCT.mdto define its core-loop test journey and monitors application logs for health checks. * Boundary markers: Instructions limit the agent to reading the file only and establish explicit logical gates, though technical delimiters are not used. * Capability inventory: The skill utilizes shell access and theagent-deviceCLI for device interaction and system state manipulation. * Sanitization: The skill does not perform validation or sanitization of the content derived fromPRODUCT.mdbefore processing it. - [COMMAND_EXECUTION]: The skill relies on shell commands for building native binaries, managing mobile emulators, and executing automated test scripts.
- [EXTERNAL_DOWNLOADS]: The skill prompts the installation of the
agent-deviceutility vianpmto satisfy functional requirements for app verification.
Audit Metadata