barcode-capture-android
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to read and modify user-provided Android project files (Activities, Fragments, build.gradle, and AndroidManifest.xml). This creates a path where instructions embedded in project files could influence agent behavior.
- Ingestion points: Project source code, build configuration files, and Android manifests are read to determine integration points and existing dependencies.
- Boundary markers: The skill does not explicitly define delimiters for user-provided code or include instructions to ignore potentially embedded directives within that code.
- Capability inventory: The skill utilizes tools for file system writing (to apply code changes), network access (to fetch documentation and SDK version data), and specialized MCP tools for license management.
- Sanitization: No specific sanitization or validation logic is defined for the content ingested from the user's project files.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the latest SDK version number from the Maven Central repository (Sonatype). This is a standard operation to ensure the use of up-to-date and stable libraries from a well-known package registry.
Audit Metadata