Audit History

All static findings were adjudicated as false positives caused by Markdown code fences, sample configuration snippets, platform CSS references, or a benign Expo platform check. No prompt injection, credential access, data exfiltration, or malicious intent was found in SKILL.md.

All static findings were adjudicated as false positives caused by Markdown code fences, sample configuration snippets, platform CSS references, or a benign Expo platform check. No prompt injection, credential access, data exfiltration, or malicious intent was found in SKILL.md.

Static analysis reported many command execution, network, environment, and obfuscation patterns, but most matches are Markdown examples or benign Expo configuration snippets. No prompt injection, credential exfiltration, obfuscated payload, or malicious execution intent was found. The remaining publishable risk is supply-chain exposure because the guide tells users to install preview and nightly packages from the npm ecosystem.

Documentation-only skill containing setup instructions for Tailwind CSS v4 in Expo. All 65 static findings are false positives: backticks are markdown code blocks, URL is example image, environment access is platform detection. No executable code or credential access.

This is a read-only documentation file containing setup instructions for Tailwind CSS v4 in Expo. All 65 static findings are false positives: JSDoc type annotations were misidentified as dynamic imports, markdown code block delimiters were misidentified as shell commands, and legitimate environment variable access for platform detection was misidentified as credential access. No executable code, credential access, or command injection vectors exist.