id-capture-android
Warn
Audited by Snyk on Jun 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to fetch external documentation and artifact pages at runtime (e.g., https://central.sonatype.com/artifact/com.scandit.datacapture/id and https://docs.scandit.com/data-capture-sdk/android/id-capture/api.html), and those fetched pages are used to determine dependency versions and to verify APIs which directly control the agent's generated code/instructions.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata