barcode-capture-kmp
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a placeholder string
-- ENTER YOUR SCANDIT LICENSE KEY HERE --for the license key, which is the correct and safe method for providing instructions without hardcoding credentials. - [SAFE]: The
prompt_injectionhint flagged 'concealment', but the manual analysis shows this is benign instructional language. The text "Do Not Trust Internal Knowledge" and "Critical:" are used to warn the LLM about potential training data gaps regarding new API versions (Kotlin Multiplatform vs. native SDKs), which is a safety mechanism to prevent the generation of broken or invalid code. - [SAFE]: External links point to the official
docs.scandit.comdomain and the officialcentral.sonatype.comregistry, which are trusted sources for documentation and SDK artifacts. - [SAFE]: The skill correctly instructs the user to handle Android runtime permissions (
CAMERA) and iOSInfo.plistrequirements, following platform-standard security models.
Audit Metadata