webapp-to-capacitor
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context injection in
SKILL.mdto perform project introspection at load time. It executes a Node.js script to parsepackage.jsonfor specific mobile-related dependencies and scripts, and afindcommand to locate configuration files likecapacitor.config.*andvite.config.*. These commands are restricted to reading project metadata and do not involve sensitive file access or network exfiltration. - [EXTERNAL_DOWNLOADS]: The skill recommends installing standard dependencies from the Capacitor project and the author's official CLI tool (
@capgo/cli). These are well-known resources in the mobile development ecosystem and are used here for their intended purpose.
Audit Metadata