capacitor-security
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes 'npx capsec' to perform security scans. This is a standard execution pattern for Node.js-based security tools. The tool and associated plugins (@capgo/capacitor-env, @capgo/capacitor-native-biometric, etc.) are official resources provided by the vendor, Capgo.
- [COMMAND_EXECUTION]: The shell commands provided are for running the security scanner and initializing configuration files. These are documented for local development and CI/CD environments and do not involve suspicious or obfuscated parameters.
- [DATA_EXFILTRATION]: No patterns of sensitive data exfiltration were found. The skill specifically provides instructions on how to detect and prevent hardcoded secrets and insecure data storage.
- [PROMPT_INJECTION]: The instructions are purely technical and educational, focusing on mobile app security. There are no attempts to override agent behavior or bypass safety constraints.
- [SAFE]: The skill links to reputable external resources, including the OWASP Mobile Top 10 and the official Capacitor security documentation.
Audit Metadata