capacitor-plugin-upgrades
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes dynamic context commands (
!command) inSKILL.mdto automatically extract project metadata and directory structure upon loading. Specifically, it uses a Node.js script to parsepackage.jsonfor Capacitor-related dependencies and thefindcommand to locate native platform directories. These operations are restricted to gathering local context and do not perform network operations or access sensitive system files. - [COMMAND_EXECUTION]: The procedures involve executing standard lifecycle commands for mobile development, such as
npm install,npx cap sync, andnpm run verify. These commands are expected within the workflow of upgrading software dependencies and are initiated in the context of the user's local project. - [DATA_EXPOSURE]: While the skill reads project configuration data, it does so to populate the agent's internal context for the upgrade task. There is no evidence of instructions to exfiltrate this data or transmit it to any external or third-party domains.
Audit Metadata