Capacitor Security Audit and harden the app layer of a Capacitor app: secrets in the bundle, on-device storage, network transport, WebView and native bridge exposure, and platform manifests. When to Use TRIGGER when: - The user asks for a security audit, OWASP Mobile Top 10 / MASVS review, or wants to fix pentest findings. - The user wants to run or interpret ( ) results, rule IDs such as , , , , , . - API keys, service-role keys, or values appear in , , , or . - Auth tokens are stored with , , IndexedDB, or plain SQLite. - contains , , broad , , or . - Native files contain , , , , or exporte…