capacitor-deep-linking

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill documents the implementation of deep link handlers which serve as an ingestion surface for untrusted data from the mobile operating system into the application context.
  • Ingestion points: The skill utilizes App.addListener('appUrlOpen') and App.getLaunchUrl() within SKILL.md to receive external URLs.
  • Boundary markers: As a technical guide, it focuses on functionality and does not explicitly include prompt-level boundary markers or instructions to ignore embedded commands.
  • Capability inventory: The ingested data is used to drive application navigation, track analytics, and handle OAuth redirection flows.
  • Sanitization: The examples show standard URL parsing and routing but do not demonstrate specific input sanitization for path segments or query parameters.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 07:39 AM