capacitor-ios
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard Capacitor framework packages such as @capacitor/core, @capacitor/cli, and @capacitor/ios via npm. These are official packages from a well-known mobile development framework.
- [COMMAND_EXECUTION]: Instructions include standard Capacitor CLI commands like
npx cap sync ios,npx cap run ios, andnpx cap add ios. These are expected operations for mobile application development and deployment. - [INDIRECT_PROMPT_INJECTION]: The skill implements a pattern for loading animation configurations from a JSON file. It specifically includes a section on 'Required Assertions' to validate the data at startup, which is a best practice for data integrity.
- Ingestion points:
assets_index.jsonas described inreferences/threejs-animation-index-pattern.md. - Boundary markers: Documentation explicitly suggests 'Required Assertions' to validate index shape and content.
- Capability inventory: The ingested data is used to configure Three.js animation actions; no dangerous system capabilities are exposed to this data.
- Sanitization: Advises failing loudly with clear validation messages if the index shape or references are incorrect.
Audit Metadata