Scanned skills
expo/skills eas-simulator
Checked the catalogued skill at eas-simulator.
F AI-triaged 4
F Security
F; retained sample includes a critical finding · SD-001 · what this rule accepts as a false positive →
A Permissions
A set by no findings on this axis
A Transparency
A set by no findings on this axis
4 findings
references/controllers.md
references/logs-and-crashes.md
references/run-your-app.md
references/run-your-app.md
5 suppressed by AI triage
references/controllers.md
Documentation only refers to path traversal concepts, not executing any traversal code.
references/logs-and-crashes.md
The curl call is part of a documented example for interacting with a preview API, not an arbitrary outbound request.
references/logs-and-crashes.md
Same curl invocation as id 2, used in a safe, documented context.
references/logs-and-crashes.md
The curl call streams crash logs from a controlled preview server, as described in documentation.
references/troubleshooting.md
The file is documentation, with no DNS exfiltration logic or data encoding.