Capacitor Security

This skill helps you run security audits on Capacitor and Ionic apps using Capsec, a zero-config scanner that checks for 63+ vulnerabilities across secrets, storage, network, and platform-specific issues. You'd reach for this when hardening a mobile app before release, adding security scanning to CI/CD, or hunting down hardcoded API keys and insecure storage patterns. It covers the full spectrum from critical issues like cleartext traffic and exposed secrets to lower-severity problems like debug mode in production. The examples show actual fixes for common mistakes like storing tokens in localStorage instead of Keychain, which makes this more useful than just knowing something is wrong.