capgo-live-updates
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation and integration guides for the Capgo live update service. No malicious behavior, prompt injection, or data exfiltration patterns were identified.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official NPM packages (
@capgo/cli,@capgo/capacitor-updater) and references a Docker image (capgo/capgo-server) from the vendor's official repository. These are standard development dependencies for the service. - [COMMAND_EXECUTION]: The skill provides typical development commands for the user to execute, such as CLI login, project initialization, and build/upload steps for deployment.
- [CREDENTIALS_SAFE]: The skill correctly uses placeholders like
YOUR_API_KEYandYOUR_PRIVATE_KEYfor sensitive configuration and recommends using environment variables/secrets for CI/CD tokens (CAPGO_TOKEN).
Audit Metadata