capacitor-plugins
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard build and package management commands including
npm install,npm config, andnpx cap syncto set up plugin dependencies and sync native projects. - [EXTERNAL_DOWNLOADS]: The skill installs plugins from the official npm registry and a dedicated vendor registry (
https://npm.registry.capawesome.io). It also references cloning the official Microsoft Intune App SDK from its GitHub repository to configure enterprise management features. - [INDIRECT_PROMPT_INJECTION]: The agent reads local project configuration files (such as
package.json,AndroidManifest.xml, andInfo.plist) to auto-detect the project environment. This ingestion of local data creates a potential surface for indirect injection if those project files were to contain malicious instructions. - Ingestion points: Reads
package.json,android/,ios/,vite.config.ts,angular.json,webpack.config.js,next.config.js,ios/App/Podfile,variables.gradle,AndroidManifest.xml, andInfo.plist(specified inSKILL.md). - Boundary markers: None identified.
- Capability inventory: Executes
npm install,npm config,npx cap sync, and native build tools. - Sanitization: None identified.
Audit Metadata