webapp-to-capacitor

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context injection in SKILL.md to perform project introspection at load time. It executes a Node.js script to parse package.json for specific mobile-related dependencies and scripts, and a find command to locate configuration files like capacitor.config.* and vite.config.*. These commands are restricted to reading project metadata and do not involve sensitive file access or network exfiltration.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing standard dependencies from the Capacitor project and the author's official CLI tool (@capgo/cli). These are well-known resources in the mobile development ecosystem and are used here for their intended purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 10:36 AM