The Agent Skills Directory

[SAFE]: No malicious patterns, prompt injections, or data exfiltration attempts were detected. The skill focuses on enhancing the security and reliability of Expo application builds.
[COMMAND_EXECUTION]: The skill provides scripts (check-variants.mjs, check-env.mjs, check-variant-bundle.mjs) that perform static and dynamic analysis of the local project. These scripts use spawnSync to run Node.js or npx expo commands to evaluate the project's own configuration files (app.config.ts, metro.config.js). This execution is confined to the local project environment for auditing purposes.
[DYNAMIC_EXECUTION]: The auditing tools utilize dynamic imports and custom Node.js execution wrappers to load the project's configuration files. This is a standard and necessary technique for auditing dynamic configuration files in the Expo ecosystem.
[CREDENTIALS_SAFE]: The skill explicitly implements multiple security checks to detect and prevent hardcoded credentials (SECRET_VALUE_PATTERNS) and ensures that sensitive files like .env.local or signing keys are correctly listed in .gitignore.

app-variants-and-environment