ionic-enterprise-sdk-migration

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill implements a dynamic context injection using node -e in the SKILL.md file. This command executes at load time to parse the local package.json and identify existing dependencies. Analysis of the script confirms it only filters for specific plugin names (@ionic-enterprise, @capgo, @capacitor) and does not perform any network operations or access sensitive credentials.\n- [EXTERNAL_DOWNLOADS]: The migration instructions guide the user to install packages such as @capgo/capacitor-social-login, @capgo/capacitor-native-biometric, and @capgo/capacitor-fast-sql. These are official packages from the skill's author (Capgo) and the Capacitor ecosystem, representing legitimate migration targets.\n- [COMMAND_EXECUTION]: The skill utilizes standard CLI tools including rg (ripgrep) for searching the codebase for leftover references and npm install for dependency management. These operations are appropriate for the stated purpose of code migration and cleanup.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 10:41 AM