barcode-capture-net-ios
Warn
Audited by Snyk on Jul 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to WebFetch the NuGet page (https://www.nuget.org/packages/Scandit.DataCapture.Barcode/) and a NuGet JSON fallback (https://api.nuget.org/v3-flatcontainer/scandit.datacapture.barcode/index.json) to determine the exact package version at runtime and to consult the API reference (https://docs.scandit.com/data-capture-sdk/dotnet.ios/barcode-capture/api.html) before responding, so these remote URLs are fetched during runtime and directly control the agent's responses.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata