📦
expo-tailwind-setup
80Configure Tailwind CSS for Expo
Expo teams need consistent styling across native and web targets. This skill gives a focused setup path for Tailwind CSS v4, NativeWind v5, and react-native-css.
Coding & Development View
Skills expo-api-routes
📦
expo-api-routes
v1.0.0 Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables
Build Expo API Routes
Expo Router API routes can be confusing when secrets, deployment, and runtime limits are involved. This skill gives practical patterns for building, testing, and deploying routes on EAS Hosting.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "expo-api-routes" from https://skillstore.io/skills/expo-expo-api-routes.md and its manifest at https://skillstore.io/api/skills/expo-expo-api-routes/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "expo-api-routes". A developer asks where to put a new users endpoint in an Expo Router project.
Expected outcome:
The response identifies the route file location, supported URL path, needed methods, validation steps, and a local testing command.
Using "expo-api-routes". A team wants to hide a weather service key from a React Native screen.
Expected outcome:
The response recommends a server-side proxy route, an environment variable name, client request behavior, and safe error handling.
Using "expo-api-routes". A release owner asks whether API routes are ready for EAS Hosting.
Expected outcome:
The response checks deployment prerequisites, runtime limits, secret storage, unsupported Node APIs, and route testing coverage.
Security Audit
Safev5 • 7/5/2026 Open versioned report
Reviewed SKILL.md and found the static alerts are caused by Markdown examples, placeholder secret names, local test URLs, and sample API route code. No evidence found of prompt injection, malware behavior, secret exfiltration, or automatic command execution.
1
Files scanned
369
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (48)
SKILL.md:33 SKILL.md:35-43 SKILL.md:43-47 SKILL.md:47-52 SKILL.md:52-58 SKILL.md:58-77 SKILL.md:77-81 SKILL.md:81-86 SKILL.md:86-92 SKILL.md:92-100 SKILL.md:100-104 SKILL.md:104-114 SKILL.md:114-118 SKILL.md:118-128 SKILL.md:128-132 SKILL.md:132-134 SKILL.md:134-143 SKILL.md:143-154 SKILL.md:154-158 SKILL.md:158-159 SKILL.md:159-165 SKILL.md:165-179 SKILL.md:179-183 SKILL.md:183-194 SKILL.md:194-200 SKILL.md:200-202 SKILL.md:202-204 SKILL.md:204-208 SKILL.md:208-211 SKILL.md:211-217 SKILL.md:217-220 SKILL.md:220-224 SKILL.md:224-226 SKILL.md:226-232 SKILL.md:232-237 SKILL.md:237-241 SKILL.md:241-249 SKILL.md:249-257 SKILL.md:257-271 SKILL.md:271-285 SKILL.md:285-298 SKILL.md:298-302 SKILL.md:302-313 SKILL.md:313-319 SKILL.md:319-342 SKILL.md:342-346 SKILL.md:346-353 SKILL.md:353-358
🌐 Network access (12)
📁 Filesystem access (1)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/expo-expo-api-routes/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/expo-expo-api-routes?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/expo-expo-api-routes?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/expo-expo-api-routes/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/expo-expo-api-routes.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
expo. (2026). expo-api-routes security audit report (audit version 5) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/expo-expo-api-routes/audits/5BibTeX citation
@techreport{expo-expo-expo-api-routes-2026,
author = {expo},
title = {expo-api-routes security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/expo-expo-api-routes/audits/5},
note = {Author version 1.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "expo-api-routes security audit report (audit version 5)"
version: "1.0.0"
type: report
authors:
- name: "expo"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/expo-expo-api-routes/audits/5"
identifiers:
- type: other
value: "skillstore:expo-expo-api-routes:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
100
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Add Server Logic to an Expo App
Create API routes for validation, data access, and mobile app features that need server execution.
Protect Third-Party API Keys
Move OpenAI, Stripe, weather, or database keys into server-side route handlers instead of client code.
Prepare Routes for EAS Hosting
Check local testing commands, deployment steps, and Cloudflare Workers limits before shipping.
Try These Prompts
Create a First Route
Use this skill to design a basic Expo Router API route for my app. Include the route file path, supported method, response shape, and local test steps.
Handle Request Data
Use this skill to plan an Expo API route that accepts request data. Explain validation, error responses, and which HTTP status codes to use.
Proxy a Secret API
Use this skill to design an Expo API route that calls a third-party service with a server-side secret. Include environment variable setup and client call guidance.
Review a Production Route Set
Use this skill to review my Expo API route plan for EAS Hosting. Check route structure, authentication, CORS, runtime limits, deployment steps, and missing safeguards.
Best Practices
- Keep secrets in server environment variables and never in client code.
- Validate and sanitize request data before database writes or external API calls.
- Test routes locally before deploying them to EAS Hosting.
Avoid
- Using API routes for public static data that needs no server logic.
- Putting API keys or database credentials inside React Native components.
- Assuming Node filesystem or native modules are available on EAS Hosting.
Frequently Asked Questions
What does this skill help me build?
It helps you plan and implement Expo Router API routes for server-side logic, proxies, validation, and deployment.
Does it support EAS Hosting?
Yes. It includes deployment steps and notes about the Cloudflare Workers runtime used by EAS Hosting.
Can it help protect API keys?
Yes. It explains how to keep keys in server environment variables and call external services from API routes.
Can I use it with Claude, Codex, and Claude Code?
Yes. The skill is packaged for Claude, Codex, and Claude Code workflows.
Does it replace backend security review?
No. It provides route patterns, but production authentication, CORS, rate limits, and validation still need review.
What projects fit this skill best?
It fits Expo Router apps that need lightweight server endpoints hosted with EAS Hosting.
Developer Details
Author
expoLicense
MIT
Author version
v1.0.0
Skillstore revision
r1
Ref
30c73eac2afe762f6aa9c4553158769369d47351
Maintenance freshness
7/18/2026
Usage
5 downloads · 161 views
File structure
📄 SKILL.md
More from expo
View all📦
native-data-fetching
80Build Expo Networking Flows
Mobile apps need reliable API requests, caching, token handling, and offline behavior. This skill guides Expo developers through fetch, React Query, SecureStore, NetInfo, and environment-based configuration.
Coding & Development View
📦
expo-dev-client
80Build Expo Dev Clients for Native Testing
Expo teams need reliable development clients when native code goes beyond Expo Go. This skill guides EAS build setup, TestFlight delivery, local builds, installation, and basic troubleshooting.
Coding & Development View
📦
use-dom
80Build Expo DOM Components
Expo teams often need web libraries inside native apps without rewriting them. This skill guides Claude, Codex, and Claude Code through safe DOM component patterns.
Coding & Development View
📦
expo-deployment
78Deploy Expo Apps with EAS
Expo releases require platform-specific build, credential, and store submission steps. This skill guides EAS builds, submissions, metadata, workflows, and rollout planning.
DevOps & Infrastructure View
📦
building-native-ui
78Build Native Expo App Interfaces
Expo apps often need native-feeling navigation, controls, media, and visual polish. This skill gives Codex and Claude practical patterns for Expo Router UI work.
Coding & Development View
Related Skills
View all📦
playwright-testing
86Build Reliable Playwright Tests
by C0ntr0lledCha0s
Playwright test suites can become flaky, slow, and difficult to maintain. This skill provides practical patterns for locators, fixtures, page objects, debugging, mocking, and configuration.
Coding & Development View
📦
starknet-js
83Build Starknet Apps with starknet.js
by internet-court
Starknet integrations require precise provider, account, transaction, and fee handling across several APIs. This skill provides focused starknet.js v9.x patterns for reliable TypeScript applications.
Coding & Development View
📦
vue-best-practices
82Improve Vue 3 Code Quality
by vuejs-ai
Vue projects often collect reactivity, component, and performance mistakes over time. This skill gives targeted Vue 3 guidance for safer patterns and clearer code.
Coding & Development View
📦
react-dev
82Build Type-Safe React Components
by softaworks
React TypeScript work often needs precise event, hook, and route types. This skill provides focused patterns for typed components, React 19 APIs, and routing.
Coding & Development View
📦
vue-options-api-best-practices
81Improve Vue Options API Code
by vuejs-ai
Vue Options API projects often lose type safety and correct this binding. This skill gives focused rules for safer Vue 3 components.
Coding & Development View
📦
senior-frontend
81Build Frontend Apps Faster
by davila7
Frontend work often needs consistent React patterns, performance checks, and project scaffolding. This skill gives Claude and compatible agents practical guidance and local helper scripts for modern web application development.
Coding & Development View