barcode-capture-web
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and code samples for the Scandit SDK. It does not contain any malicious instructions or unauthorized data access patterns.
- [PROMPT_INJECTION]: Although static analysis flagged instructions for concealing actions, these were identified as security best practices. The skill directs the agent to mask sensitive license keys in chat outputs and explicitly forbids searching the project environment for secrets, effectively protecting against accidental credential exposure.
- [EXTERNAL_DOWNLOADS]: The skill references official NPM packages (@scandit/web-datacapture-core, @scandit/web-datacapture-barcode) and uses established CDNs like jsDelivr for asset delivery. These resources originate from the verified vendor or trusted public registries.
- [DATA_EXFILTRATION]: No exfiltration patterns were detected. The handling of license keys is restricted to secure tool calls with mandatory masking in the user interface, ensuring sensitive data is not leaked or transmitted to unauthorized parties.
Audit Metadata