capgo-release-management

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to fetch and execute the official @capgo/cli package from the public npm registry. This is the standard method for using the Capgo service's tooling and does not involve untrusted third-party sources.
  • [COMMAND_EXECUTION]: Provides guidance for executing CLI commands related to app bundle management, channel configuration, and encryption keys. All commands are specific to the Capgo release workflow and do not include arbitrary or dangerous system calls.
  • [SAFE]: The documentation explicitly encourages security best practices, such as keeping private keys out of version control and verifying bundle compatibility before rollout.
  • [SAFE]: No patterns of prompt injection, data exfiltration, obfuscation, or persistence mechanisms were detected. The references point to the legitimate service domain at capgo.app.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 07:38 AM