React Native Skills

v1.0.0

React Native and Expo best practices for building performant mobile apps. Use when building React Native components, optimizing list performance, implementin...

2· 1.1k·29 current·29 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (React Native / Expo best practices) matches the included files (AGENTS.md and rule docs). There are no unrelated requirements (no env vars, binaries, or install steps) that would be disproportionate to a documentation / guidance skill.
Instruction Scope
SKILL.md and the rule files are documentation for code generation/refactoring and reference concrete coding patterns and occasional developer commands (e.g., `npx expo prebuild` in the fonts rule). That is within scope for a coding-guidance skill, but the AGENTS.md explicitly says guidance is optimized for automation — if you allow an agent to act autonomously with this skill, it may use these recommendations to modify or run build commands in your codebase. No instructions reference secrets, system paths, or external endpoints beyond normal package/docs links.
Install Mechanism
No install spec and no code files with executable install steps. Instruction-only skills are lowest-risk for disk persistence or arbitrary code execution.
Credentials
The skill declares no required environment variables, credentials, or config paths. The content references normal developer dependencies (React Native, Expo, Reanimated, FlashList, etc.), which is expected and proportional to the stated purpose.
Persistence & Privilege
Flags show no forced persistence (always: false) and default agent invocation settings. The skill does not request to modify other skills or system-wide settings.
Assessment
This skill is essentially a documentation bundle of React Native / Expo best practices and appears coherent and proportionate. There are no requested secrets or install scripts, so the static risk is low. Things to consider before installing: 1) Source verification — the metadata lists no homepage and the package owner is an opaque ID; if you require provenance, confirm the origin (author claims 'vercel' in the docs but registry metadata doesn't provide a public homepage). 2) If you permit an autonomous agent to use this skill, be aware the AGENTS.md is optimized for automation and the agent could apply these rules to modify or run commands in your repository (e.g., running build or CLI commands). Limit the agent's write/run permissions or require human review of changes if you want to avoid unintended code modification. 3) The guidance references third-party libraries (FlashList, LegendList, Galeria, expo-image, etc.); auditing those dependencies in your project is recommended before adopting suggestions. Overall, the skill is consistent with its stated purpose and does not request privileged access.

Like a lobster shell, security has layers — review code before you run it.

expovk9729brm0xf8thb14kqnn17q0581xfkylatestvk9729brm0xf8thb14kqnn17q0581xfkymobilevk9729brm0xf8thb14kqnn17q0581xfkyreact-nativevk9729brm0xf8thb14kqnn17q0581xfky

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments