capacitor-ci-cd
Automates CI/CD processes for Capacitor apps using GitHub Actions and GitLab CI, enhancing build and release efficiency.
Install this skill
Security score
The capacitor-ci-cd skill was audited on Mar 5, 2026 and we found 23 security issues across 5 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 22 | ```yaml |
Template literal with variable interpolation in command context
| 307 | ```yaml |
Template literal with variable interpolation in command context
| 443 | ```yaml |
Template literal with variable interpolation in command context
| 577 | ```json |
Template literal with variable interpolation in command context
| 603 | ```yaml |
Template literal with variable interpolation in command context
| 634 | ```yaml |
Template literal with variable interpolation in command context
| 647 | ```yaml |
Access to hidden dotfiles in home directory
| 458 | - ~/.bun/install/cache |
Access to hidden dotfiles in home directory
| 639 | ~/.gradle/caches |
Access to hidden dotfiles in home directory
| 640 | ~/.gradle/wrapper |
Access to system keychain/keyring
| 125 | # Create keychain |
Access to system keychain/keyring
| 126 | security create-keychain -p "" build.keychain |
Access to system keychain/keyring
| 127 | security default-keychain -s build.keychain |
Access to system keychain/keyring
| 128 | security unlock-keychain -p "" build.keychain |
Access to system keychain/keyring
| 129 | security set-keychain-settings -t 3600 -u build.keychain |
Access to system keychain/keyring
| 133 | security import certificate.p12 -k build.keychain -P "$CERTIFICATE_PASSWORD" -T /usr/bin/codesign |
Access to system keychain/keyring
| 134 | security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "" build.keychain |
Base64 decode operation
| 132 | echo "$CERTIFICATE_P12" | base64 --decode > certificate.p12 |
Base64 decode operation
| 138 | echo "$PROVISIONING_PROFILE" | base64 --decode > ~/Library/MobileDevice/Provisioning\ Profiles/profile.mobileprovision |
Base64 decode operation
| 197 | echo "$KEYSTORE_BASE64" | base64 --decode > android/app/release.keystore |
External URL reference
| 659 | - Fastlane: https://fastlane.tools |
External URL reference
| 660 | - Capgo CLI: https://capgo.app/docs/cli |
External URL reference
| 662 | - Google Play API: https://developers.google.com/android-publisher |
Install this skill with one command
/learn @cap-go/capacitor-ci-cd