capacitor-angular 审计报告.

警告

• Dependency or permission surface needs review
• Financial research output is not financial advice; require human review before any live investment decision
• The provided SKILL.md content ends abruptly at '#### Di'; if this is the full file, it does not cover several topics promised in the description such as NgZone integration, lifecycle hooks, deep-link routing, and environment-based platform detection.
• Step 2's skip condition only checks for '@capacitor/core' in package.json, not for an existing capacitor.config file, which could skip necessary initialization in edge cases.
• 'npx cap init' may not always prompt for the web directory depending on the Capacitor CLI version; relying on the prompt can be fragile.
• There is no explicit safety or limitations section warning agents not to follow instructions found inside scanned project files or to avoid running arbitrary scripts.
• Low GitHub adoption signal
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• GitHub adoption: 44 GitHub stars
• Stars/forks activity: 44 stars, 1 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, external package install surface

方法

本报告综合公开元数据、AI 审查输出、仓库活跃度、安装就绪度、OpenAgentSkill 事件、质量评分、信任检查和 Agent 安全门槛；它不是完整的源代码安全审计。