react-native-dev
Fail
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [REMOTE_CODE_EXECUTION]: The file
references/testing.mdinstructs the user to execute a remote script using thecurl | bashpattern:curl -Ls "https://get.maestro.mobile.dev" | bash. This method downloads and executes unverified code directly from the internet, which is a major security risk.\n- [EXTERNAL_DOWNLOADS]: The skill directs users to download software from an external domain (mobile.dev) that is not included in the trusted vendor list, facilitating the execution of external code on the host system.\n- [METADATA_POISONING]: Automated security scanners have flagged the mainSKILL.mdfile with aFileRepMalwaredetection. This reputation-based alert indicates that the file content or its metadata matches known malicious signatures.\n- [COMMAND_EXECUTION]: The skill relies heavily on shell-based commands (npx,expo install,eas build) for project setup and management. While standard for mobile development, these patterns increase the potential impact of command injection or malicious package substitution if dependencies are not strictly verified.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
Audit Metadata