web-support
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a robust framework for auditing Expo projects to ensure they are compatible with browser environments. It focuses on identifying missing React Native APIs and preventing common deployment errors.
- [SAFE]: Automated analysis scripts (such as
check-web-support.mjs) utilize static analysis to verify that the application's web bundle does not include native-only modules or insecure storage patterns. - [SAFE]: The skill includes explicit security rules, notably Rule 8, which warns against storing secrets in browser storage (
localStorage,sessionStorage, etc.), promoting the use of secure alternatives like httpOnly cookies. - [SAFE]: The browser-based verification tool (
check-web-export.mjs) executes smoke tests in a local headless Chrome environment, binding to127.0.0.1to ensure tests remain isolated and do not expose the application to external network risks. - [SAFE]: All identified scripts use standard Node.js built-in modules and do not download or execute unverifiable external code.
Audit Metadata