capacitor-security

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes 'npx capsec' to perform security scans. This is a standard execution pattern for Node.js-based security tools. The tool and associated plugins (@capgo/capacitor-env, @capgo/capacitor-native-biometric, etc.) are official resources provided by the vendor, Capgo.
  • [COMMAND_EXECUTION]: The shell commands provided are for running the security scanner and initializing configuration files. These are documented for local development and CI/CD environments and do not involve suspicious or obfuscated parameters.
  • [DATA_EXFILTRATION]: No patterns of sensitive data exfiltration were found. The skill specifically provides instructions on how to detect and prevent hardcoded secrets and insecure data storage.
  • [PROMPT_INJECTION]: The instructions are purely technical and educational, focusing on mobile app security. There are no attempts to override agent behavior or bypass safety constraints.
  • [SAFE]: The skill links to reputable external resources, including the OWASP Mobile Top 10 and the official Capacitor security documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 05:56 PM