sparkscan-android

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent at runtime to fetch the latest SDK version from https://central.sonatype.com/artifact/com.scandit.datacapture/barcode and use that fetched value to populate dependency version strings (thus external content directly controls generated code/instructions), so this URL is flagged.