capacitor-push-notifications
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project files including
package.json, build configurations, and directory structures to automate the setup process. It has the capability to execute shell commands and modify source code files. - Ingestion points: Project configuration files and directory structures in the user's workspace (e.g.,
package.json,android/,ios/). - Boundary markers: None specified for the analysis of local project metadata.
- Capability inventory: Execution of shell commands (
npm,npx) and modification of Android/iOS configuration and source files. - Sanitization: Not explicitly mentioned for the processing of local project metadata.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard mobile development packages from public registries and references official Firebase SDKs and API endpoints provided by Google for push notification functionality.
- [COMMAND_EXECUTION]: The skill guides the execution of standard build and package management commands, such as
npm installandnpx cap sync, which are required for configuring Capacitor platforms and synchronizing dependencies.
Audit Metadata