ionic-deep-links
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official
@capacitor/appplugin from the NPM registry to handle native application events and deep link URL listeners. - [INDIRECT_PROMPT_INJECTION]: The skill implements logic to process deep links, which are a common entry point for untrusted external data that can influence application behavior.
- Ingestion points: The skill captures external URLs via the
@capacitor/appplugin usingApp.addListener('appUrlOpen', ...)andApp.getLaunchUrl()as described inreferences/custom-scheme.mdandreferences/routing.md. - Boundary markers: The instructions do not prescribe specific delimiters for the external URL strings, though this is expected for standard deep link handling.
- Capability inventory: The provided implementation examples in
references/routing.mddemonstrate programmatic navigation (e.g.,this.router.navigateByUrl,router.push) triggered by data parsed from the external URL. - Sanitization: The skill proactively provides security guidance in
references/routing.md, advising developers to manually map external paths to internal routes and to validate query parameters before using them in routing logic.
Audit Metadata