capgo-live-updates
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx @capgo/cliand standard Capacitor CLI commands (npx cap sync) to initialize projects, manage channels, and upload update bundles. These operations are the core functionality of the service. - [EXTERNAL_DOWNLOADS]: It provides instructions for installing official packages from the
@capgoand@capacitorscopes on the NPM registry. - [CREDENTIALS_UNSAFE]: The skill mentions the use of API keys and private keys but includes specific security warnings against committing private keys to source control and recommends using environment variables (
CAPGO_TOKEN) for CI/CD automation. It also instructs the agent not to echo back API keys provided by the user.
Audit Metadata