rtl-and-direction
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a static analysis script (
scripts/check-rtl.mjs) and a self-test runner (scripts/selftest.mjs). These scripts use Node.jsnode:child_processto execute the checker against local test fixtures. This activity is restricted to the local development environment for linting purposes and does not pose a security risk. - [EXTERNAL_DOWNLOADS]: Configuration templates and package manifests reference well-known and trusted mobile development libraries including
expo,react-native,expo-localization, andreact-native-reanimated. These are standard dependencies for the target ecosystem. - [DYNAMIC_EXECUTION]: The shared library
scripts/check-lib.mjsincludes a helper function that uses theimport()keyword to load local Node.js packages from a tooling directory. This is used for internal script dependencies and is not used to execute untrusted or remote code in the context of this skill.
Audit Metadata