ionic-enterprise-sdk-migration

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses the !command`` syntax in SKILL.md to execute a Node.js inline script that reads the local package.json file when the skill is loaded to detect relevant project dependencies.
  • [COMMAND_EXECUTION]: The skill instructs the agent to use rg (ripgrep) for searching strings within the codebase and npm/npx for dependency management and Capacitor platform synchronization.
  • [EXTERNAL_DOWNLOADS]: The skill references and installs official migration packages from the @capgo and @capacitor organizations via the npm registry, which are recognized as trusted and well-known services.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 03:30 PM
Security Audit — agent-trust-hub — ionic-enterprise-sdk-migration