skills/kyh/vibedgames/capacitor-ios/Gen Agent Trust Hub

capacitor-ios

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references standard Capacitor framework packages such as @capacitor/core, @capacitor/cli, and @capacitor/ios via npm. These are official packages from a well-known mobile development framework.
  • [COMMAND_EXECUTION]: Instructions include standard Capacitor CLI commands like npx cap sync ios, npx cap run ios, and npx cap add ios. These are expected operations for mobile application development and deployment.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements a pattern for loading animation configurations from a JSON file. It specifically includes a section on 'Required Assertions' to validate the data at startup, which is a best practice for data integrity.
  • Ingestion points: assets_index.json as described in references/threejs-animation-index-pattern.md.
  • Boundary markers: Documentation explicitly suggests 'Required Assertions' to validate index shape and content.
  • Capability inventory: The ingested data is used to configure Three.js animation actions; no dangerous system capabilities are exposed to this data.
  • Sanitization: Advises failing loudly with clear validation messages if the index shape or references are incorrect.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 04:16 AM