label-capture-net-android

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill’s required workflow reads outsider-authored free text from LabelCaptureSession.CapturedLabels → LabelField.Text (manual entry) and LabelField.Barcode?.Data (decoded label content), which originates from external users/customers rather than the operating user.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to WebFetch runtime content (e.g., https://www.nuget.org/packages/Scandit.DataCapture.Label/ with fallback https://api.nuget.org/v3-flatcontainer/scandit.datacapture.label/index.json and documentation pages under https://docs.scandit.com/) which are fetched during runtime to determine package versions and API details that directly control generated code/ prompts, so these are runtime external dependencies that influence agent instructions.