capacitor-live-update
Warn
Audited by Snyk on Mar 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). This skill relies on Capawesome Cloud at runtime (serverDomain api.cloud.capawesome.io — e.g. https://api.cloud.capawesome.io) and the LiveUpdate plugin will fetch and download remote web bundles that execute JavaScript in the app, so external URLs returned/registered at runtime can directly deliver and execute remote code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata