subscription-app-revenue
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context injection placeholders in SKILL.md to inspect the local project structure when the skill is loaded.
- A Node.js script reads the
package.jsonfile to identify relevant dependencies (such as analytics, billing SDKs, and Capacitor plugins) and available build scripts. - A
findcommand is used to locate standard application configuration files (e.g.,capacitor.config.*,Info.plist,AndroidManifest.xml). - These operations are restricted to project-related metadata discovery and do not access sensitive user credentials or perform any network operations.
Audit Metadata