capacitor-app-spm-migration
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized behaviors were detected. The skill is highly focused on its stated purpose of project migration and includes robust safety checks, such as requiring a clean git working tree and creating a local backup before making destructive changes.
- [COMMAND_EXECUTION]: Employs standard system commands (
mkdir,cp,rm,find) and development CLI tools (npm,npx,git) for project manipulation. All commands are used appropriately within the context of migrating theios/folder and re-scaffolding the project. - [EXTERNAL_DOWNLOADS]: Triggers standard package management operations via
npm installandnpx, which download dependencies from the official npm registry. These operations are essential for Capacitor project maintenance and do not involve untrusted third-party sources. - [DATA_EXFILTRATION]: Accesses local project configuration files (e.g.,
package.json,Info.plist,project.pbxproj) solely to preserve user settings and restore them after re-scaffolding the iOS project. No evidence of unauthorized data transfer or exfiltration to external domains was found.
Audit Metadata