Versioned security assessment

Report ID: SA-669FE9A0

6/28/2026, 8:10:35 PM

react-native-best-practices security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
react-native-best-practices
Version
v2
Maintainer
callstackincubator
Source
github.com/callstackincubator/agent-skills/tree/main/skills/react-native-best-practices/
Coverage
29 Files scanned · 6,499 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

This is a documentation-only React Native performance skill. Static analysis mostly matched Markdown fences, shell examples, and performance terminology, not executable skill code. Publication is acceptable with warnings for pipe-to-shell installation guidance and remote chunk loading examples.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

29 Files scanned · 6,499 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 3 evidence locations

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Observed in 3 evidence locations

Env variables

May read values from the process environment.

Observed in 3 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 3 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Medium
references/js-measure-fps.md:18references/js-measure-fps.md:74-76
Pipe-To-Shell Installer Guidance
The skill recommends installing Flashlight with a curl-to-bash command. This is not malicious, but it executes downloaded code without inspection and should be shown as a warning.
The exact pipe-to-shell command appears twice in a performance measurement guide. The context is legitimate tooling, but the installation pattern is clearly risky.
RISK-002 Medium
references/bundle-code-splitting.md:92-107references/bundle-code-splitting.md:141-149references/bundle-code-splitting.md:169-175
Remote Chunk Loading Requires Trust Controls
The code splitting guide shows production chunks loaded from a CDN and module federation examples. This is legitimate Re.Pack usage, but users need integrity and release controls.
The guidance intentionally loads runtime code from configured URLs. No malicious endpoint is present, but remote code loading is security-sensitive by design.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (4)
Low
SKILL.md:55-78SKILL.md:157-165references/native-android-16kb-alignment.md:55-84
Markdown Shell Examples Flagged As Execution
Most external command alerts are Markdown code fences that document normal React Native, Expo, Android, and iOS tooling. They are not executable skill logic.
The flagged locations are documentation blocks and lookup commands. They do not run automatically when the skill is loaded.
Low
references/js-concurrent-react.md:13references/js-concurrent-react.md:164
Keylogger Keyword False Positive
The critical keylogger alerts come from the word keystroke in a UI latency example. The content discusses blocked typing, not logging user input.
The surrounding examples use TextInput to explain responsiveness with useDeferredValue. No capture, storage, or transmission of keystrokes is present.
Low
references/native-sdks-over-polyfills.md:17-25references/native-sdks-over-polyfills.md:83-99
Weak Crypto Alerts Are Performance Guidance
The crypto-related alerts are documentation about replacing slow JavaScript crypto packages with native implementations. No weak algorithm or credential handling was found.
The cited content compares package choices for performance and recommends CSPRNG-capable native crypto. It does not implement encryption or request secrets.
Low
references/bundle-analyze-js.md:152-160references/bundle-tree-shaking.md:13-17references/bundle-code-splitting.md:169-175references/bundle-hermes-mmap.md:33-37
Environment And Filesystem Access Are Configuration Examples
Environment and filesystem alerts are examples for build flags, cold-start detection, cache paths, mmap explanation, and local dependency inspection. No secret exfiltration was found.
The examples read feature flags or explain platform behavior. The skill does not combine these with network transmission or credential collection.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable