capacitor-app-upgrade-v6-to-v7
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the !
commandsyntax to automatically run a node script that reads the local package.json file. This provides the agent with current Capacitor dependency versions to guide the upgrade. - [INDIRECT_PROMPT_INJECTION]: The skill reads external data from the project's package.json file. Ingestion points: SKILL.md (node command). Boundary markers: None. Capability inventory: npm and npx execution allowed in SKILL.md. Sanitization: None, though the script is hardcoded to only extract version strings.
- [COMMAND_EXECUTION]: The skill instructions and metadata guide the agent to perform package updates and native syncs using standard development tools like npm and Capacitor CLI.
Audit Metadata