{"data":{"skill":{"slug":"expo-expo-dev-client","name":"expo-dev-client","icon":"📦","repo":"https://github.com/expo/skills/tree/main/plugins/expo-app-design/skills/expo-dev-client/","status":"approved","author":"expo","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"e3d6e7d4-8eeb-4f7a-8568-20b988d340f7","skill_id":"9e979acf-eb6e-4003-8714-de30d6436bc5","version":2,"content_hash":"2f12dd67316fcf22c6d8d3ecd16df54e","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All 38 static findings evaluated as false positives. The skill contains legitimate documentation for Expo EAS CLI commands and standard development workflows. No malicious patterns, command injection vectors, or data exfiltration detected.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":45,"line_start":25},{"file":"SKILL.md","line_end":48,"line_start":45},{"file":"SKILL.md","line_end":49,"line_start":48},{"file":"SKILL.md","line_end":50,"line_start":49},{"file":"SKILL.md","line_end":56,"line_start":50},{"file":"SKILL.md","line_end":58,"line_start":56},{"file":"SKILL.md","line_end":74,"line_start":58},{"file":"SKILL.md","line_end":80,"line_start":74},{"file":"SKILL.md","line_end":83,"line_start":80},{"file":"SKILL.md","line_end":84,"line_start":83},{"file":"SKILL.md","line_end":84,"line_start":84},{"file":"SKILL.md","line_end":90,"line_start":84},{"file":"SKILL.md","line_end":94,"line_start":90},{"file":"SKILL.md","line_end":98,"line_start":94},{"file":"SKILL.md","line_end":101,"line_start":98},{"file":"SKILL.md","line_end":105,"line_start":101},{"file":"SKILL.md","line_end":107,"line_start":105},{"file":"SKILL.md","line_end":111,"line_start":107},{"file":"SKILL.md","line_end":120,"line_start":111},{"file":"SKILL.md","line_end":124,"line_start":120},{"file":"SKILL.md","line_end":130,"line_start":124},{"file":"SKILL.md","line_end":141,"line_start":130},{"file":"SKILL.md","line_end":146,"line_start":141},{"file":"SKILL.md","line_end":151,"line_start":146},{"file":"SKILL.md","line_end":153,"line_start":151},{"file":"SKILL.md","line_end":156,"line_start":153},{"file":"SKILL.md","line_end":158,"line_start":156},{"file":"SKILL.md","line_end":161,"line_start":158},{"file":"SKILL.md","line_end":164,"line_start":161}]}],"critical_findings":[],"high_findings":[{"title":"External Commands Documentation","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":57,"line_start":57},{"file":"SKILL.md","line_end":76,"line_start":76},{"file":"SKILL.md","line_end":92,"line_start":92},{"file":"SKILL.md","line_end":106,"line_start":106}],"confidence":0.95,"description":"The skill contains examples of EAS CLI and development tool commands. These are legitimate documentation examples for building Expo development clients.","confidence_reasoning":"All commands are hardcoded EAS CLI examples with no user input injection. These are standard Expo development workflow documentation."}],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":165,"audit_model":"claude","audited_at":"2026-01-23T07:20:18.655+00:00","created_at":"2026-01-23T07:47:28.301119+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":1,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}