capacitor-plugin-upgrade-v7-to-v8
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!commandsyntax inSKILL.mdto execute shell commands when the skill is loaded. - A
node -ecommand reads the localpackage.jsonto extract project names and@capacitor/related dependencies. - A
findcommand identifies standard Capacitor project directories likeios,android, andexample-app. - These operations are benign, do not access sensitive credentials, and are used solely to provide context to the agent about the current state of the project being upgraded.
Audit Metadata