Audit History

All 20 static detections are false positives caused by Markdown fences, inline code, documentation links, and ordinary mobile development instructions. The skill contains no prompt-injection language, data-exfiltration intent, hidden commands, or system reconnaissance.

All 20 static findings are false positives. The command-like matches are Markdown fences, API names, or optional local React Native and Expo commands; the URLs link only to official documentation. No prompt injection, data exfiltration, or malicious intent was found in SKILL.md.

All 20 static findings are false positives. The command-like matches are Markdown fences, API names, or optional local React Native and Expo commands; the URLs link only to official documentation. No prompt injection, data exfiltration, or malicious intent was found in SKILL.md.

All 20 static findings are false positives. The command-like matches are Markdown fences, API names, or optional local React Native and Expo commands; the URLs link only to official documentation. No prompt injection, data exfiltration, or malicious intent was found in SKILL.md.

All static findings were false positives caused by Markdown code fences, inline API names, fixed npm or Expo command examples, and official documentation links. I found no evidence of prompt injection, hidden command execution, data exfiltration, or malicious intent in SKILL.md.

All static findings were false positives caused by Markdown code fences, inline API names, fixed npm or Expo command examples, and official documentation links. I found no evidence of prompt injection, hidden command execution, data exfiltration, or malicious intent in SKILL.md.

Static analysis flagged external command examples, documentation URLs, and several blocker patterns. Review found no prompt injection, malicious intent, credential access, or data exfiltration; the weak cryptography and system reconnaissance matches are false positives. The remaining risk is that the skill permits Bash and file edits while recommending npm, npx, Expo, iOS, and Android commands that can execute project scripts or install third-party packages.

Documentation-only skill for React Native development. Contains no executable code, scripts, or file system operations. Static findings are false positives from markdown documentation elements (color codes, bash examples, external links) that the scanner misidentified as security risks.

Documentation-only skill for React Native development. Contains no executable code, scripts, or file system operations. Static findings are false positives from markdown documentation elements (color codes, bash examples, external links) that the scanner misidentified as security risks.

This is a documentation-only skill containing guidance, code patterns, and best practices for React Native development. No executable code, scripts, network activity, or file system access beyond its own documentation file.

This is a documentation-only skill containing guidance, code patterns, and best practices for React Native development. No executable code, scripts, network activity, or file system access beyond its own documentation file.

This is a documentation-only skill containing guidance, code patterns, and best practices for React Native development. No executable code, scripts, network activity, or file system access beyond its own documentation file.