capacitor-app-upgrade-v7-to-v8
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill contains a shell command in
SKILL.mdusing the!syntax, which executes at load time. This command reads the localpackage.jsonfile to identify existing@capacitor/packages and their versions. This provides the agent with the current project state required for the migration. The operation is limited to reading a standard project file and does not involve network exfiltration or access to sensitive system paths. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local environment to guide its actions.
- Ingestion points: Package versions are extracted from
package.jsonvia the dynamic shell command inSKILL.md. - Boundary markers: The injected data is localized under the 'Live Project Snapshot' section header.
- Capability inventory: The skill instructions include running
npm installandnpx cap syncto manage project dependencies. - Sanitization: The extraction logic explicitly filters for strings starting with
@capacitor/, preventing the processing of arbitrary or unrelated keys from the JSON file.
Audit Metadata