web-support

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a robust framework for auditing Expo projects to ensure they are compatible with browser environments. It focuses on identifying missing React Native APIs and preventing common deployment errors.
  • [SAFE]: Automated analysis scripts (such as check-web-support.mjs) utilize static analysis to verify that the application's web bundle does not include native-only modules or insecure storage patterns.
  • [SAFE]: The skill includes explicit security rules, notably Rule 8, which warns against storing secrets in browser storage (localStorage, sessionStorage, etc.), promoting the use of secure alternatives like httpOnly cookies.
  • [SAFE]: The browser-based verification tool (check-web-export.mjs) executes smoke tests in a local headless Chrome environment, binding to 127.0.0.1 to ensure tests remain isolated and do not expose the application to external network risks.
  • [SAFE]: All identified scripts use standard Node.js built-in modules and do not download or execute unverifiable external code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 11:23 AM