capacitor-react
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from project configuration files which could potentially contain malicious instructions that influence the agent's behavior.
- Ingestion points:
package.json,tsconfig.json,vite.config.ts,next.config.js,remix.config.js,capacitor.config.ts, andcapacitor.config.json(as described in Step 1 ofSKILL.md). - Boundary markers: Absent; the instructions do not define delimiters or specific warnings to ignore content within the analyzed files.
- Capability inventory: The skill instructs the agent to execute shell commands (
npm run build,npx cap sync,npx cap run) inSKILL.mdand generate or modify source files in the project directories. - Sanitization: Absent; no explicit validation or escaping of the configuration data is mentioned.
- [COMMAND_EXECUTION]: The skill guides the user to run standard Capacitor CLI commands for project synchronization and deployment.
- Evidence: Procedures in
SKILL.mdsuggest usingnpx cap syncandnpx cap runwith various platform-specific flags.
Audit Metadata