code-review-react-native

Review React Native plugin changes for cross-language bridge contract correctness.

171|19|Updated Jan 6, 2023
One-click install
npx skills add https://github.com/talsec/Free-RASP-ReactNative --skill code-review-react-native
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-react-native
Source: https://github.com/talsec/Free-RASP-ReactNative/tree/main/.agents/skills/code-review-react-native
Command: npx skills add https://github.com/talsec/Free-RASP-ReactNative --skill code-review-react-native

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps prevent regressions and long-term codebase rot in React Native plugin repositories by enforcing strict, cross-language correctness across TypeScript, Kotlin (Android), Swift (iOS), and Expo config plugin output.

Core Features & Use Cases

  • Correctness & contract alignment: Ensures public API and native/wire contracts stay consistent between TypeScript types and native bridge/event wiring.
  • Native-layer cleanliness checks: Blocks risky patterns like hardcoded fallbacks in Kotlin/Swift and enforces that defaults belong in the layer that owns the contract.
  • Event and obfuscation integrity: Verifies NativeEventEmitter channel data array shapes/order and protects security-relevant EventIdentifiers obfuscation logic.
  • Release-safe review workflow: Handles built outputs (lib/ and plugin/build/) as regenerated artifacts and focuses review on hand-written sources with clear escalation rules.

Quick Start

Ask the AI to review your React Native plugin pull request for PR#N and to produce a structured report with blockers, major issues, minor/polish notes, and a recommended action list.

Frequently Asked Questions about code-review-react-native

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review React Native plugin PRs for native bridge contract alignment?

To review React Native plugin pull requests, enforce strict cross-language correctness between TypeScript, Kotlin, and Swift bridge wiring. This ensures public API contracts and native event emitter channel data shapes remain consistent across platforms.

What is the best way to check SemVer correctness in React Native native modules?

Checking SemVer correctness in React Native native modules involves reviewing pull request diffs to ensure version bumps accurately reflect changes to TypeScript types, Expo config plugin outputs, and native bridge contracts without breaking existing integrations.

Why should hardcoded fallbacks be blocked in Kotlin and Swift native bridges?

Hardcoded fallbacks in Kotlin and Swift native bridges should be blocked because defaults must belong to the layer that owns the contract. Enforcing this prevents risky patterns and maintains long-term codebase cleanliness across native layers.

How do you handle built artifacts during a React Native plugin code review?

Handling built artifacts during a React Native plugin code review requires treating lib/ and plugin/build/ directories as regenerated outputs. The review focuses on hand-written sources and escalates issues if generated artifacts are incorrectly modified.

Does this code review process verify NativeEventEmitter obfuscation logic?

Yes, the code review process verifies NativeEventEmitter channel data array shapes and order. It also protects security-relevant EventIdentifiers obfuscation logic to ensure event and obfuscation integrity across the native bridge.

Can I use this to review Expo config plugin output changes?

Yes, you can review Expo config plugin output changes. The review ensures that modifications to generated or built artifacts align correctly with hand-written sources and maintain strict TypeScript, Kotlin, and Swift bridge consistency.