expo-prebuild-and-config-plugins

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The auditing scripts check-native-generation.mjs and check-native-snapshot.mjs utilize spawnSync to execute git and the expo CLI. These operations are restricted to project introspection and state verification, which are the primary functions of this skill.
  • [DYNAMIC_EXECUTION]: The skill performs dynamic evaluation of local project configuration files (app.config.ts) using node -e and import(). Additionally, check-lib.mjs contains logic to dynamically load Node.js modules from a local tooling directory. These behaviors are justified by the skill's purpose as a build-time auditing tool and operate on the user's own local codebase.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 11:22 AM