{"data":{"skill":{"slug":"expo-expo-dev-client","name":"expo-dev-client","icon":"📦","repo":"https://github.com/expo/skills/tree/main/plugins/expo-app-design/skills/expo-dev-client/","status":"approved","author":"expo","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"8891a0f3-2f38-4821-a76a-f02860fc82b1","skill_id":"9e979acf-eb6e-4003-8714-de30d6436bc5","version":1,"content_hash":"3bb5c581114184142a6f5455a19044b6","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All 38 static findings are false positives. External command detections are legitimate Expo/EAS CLI commands for development workflows. No malicious patterns, credential exfiltration, or security risks identified. The skill contains only documentation for standard build commands.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":45,"line_start":25},{"file":"SKILL.md","line_end":48,"line_start":45},{"file":"SKILL.md","line_end":49,"line_start":48},{"file":"SKILL.md","line_end":50,"line_start":49},{"file":"SKILL.md","line_end":56,"line_start":50},{"file":"SKILL.md","line_end":58,"line_start":56},{"file":"SKILL.md","line_end":74,"line_start":58},{"file":"SKILL.md","line_end":80,"line_start":74},{"file":"SKILL.md","line_end":83,"line_start":80},{"file":"SKILL.md","line_end":84,"line_start":83},{"file":"SKILL.md","line_end":84,"line_start":84},{"file":"SKILL.md","line_end":90,"line_start":84},{"file":"SKILL.md","line_end":94,"line_start":90},{"file":"SKILL.md","line_end":98,"line_start":94},{"file":"SKILL.md","line_end":101,"line_start":98},{"file":"SKILL.md","line_end":105,"line_start":101},{"file":"SKILL.md","line_end":107,"line_start":105},{"file":"SKILL.md","line_end":111,"line_start":107},{"file":"SKILL.md","line_end":120,"line_start":111},{"file":"SKILL.md","line_end":124,"line_start":120},{"file":"SKILL.md","line_end":130,"line_start":124},{"file":"SKILL.md","line_end":141,"line_start":130},{"file":"SKILL.md","line_end":146,"line_start":141},{"file":"SKILL.md","line_end":151,"line_start":146},{"file":"SKILL.md","line_end":153,"line_start":151},{"file":"SKILL.md","line_end":156,"line_start":153},{"file":"SKILL.md","line_end":158,"line_start":156},{"file":"SKILL.md","line_end":161,"line_start":158},{"file":"SKILL.md","line_end":164,"line_start":161}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":165,"audit_model":"claude","audited_at":"2026-01-23T07:06:51.608+00:00","created_at":"2026-01-23T07:22:51.827765+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}