The Agent Skills Directory

[SAFE]: The skill acts as an educational resource for the Capacitor framework. It covers development workflows, plugin management, and native configuration. It explicitly promotes security best practices including secret management, HTTPS enforcement, and Content Security Policy (CSP) implementation.
[COMMAND_EXECUTION]: The instructions include standard CLI commands for Capacitor development. Commands like npx cap sync, npx cap run, and npx cap open are the intended method for using the framework. Package installation commands target well-known official packages (@capacitor/*).
[INDIRECT_PROMPT_INJECTION]: The skill discusses handling external data via Deep Links (Universal Links and App Links). Ingestion points: External URLs processed by the appUrlOpen listener in SKILL.md and references/security-and-deeplinks.md. Boundary markers: Guidance includes domain verification files (apple-app-site-association, assetlinks.json) to ensure link authenticity. Capability inventory: The guide details access to the filesystem, network, and SQLite via Capacitor plugins. Sanitization: The documentation explicitly recommends sanitizing user-generated content before rendering to prevent XSS.

capacitor