id-capture-net-android
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. All analyzed files contain legitimate technical documentation and development guidelines for the Scandit ID Capture SDK.
- [PROMPT_INJECTION]: The static detector flagged a 'concealment' pattern regarding instructions to provide documentation content directly rather than asking the user to visit a URL. This is a benign instructional guideline intended to improve agent helpfulness and context usage, and does not constitute a security risk.
- [EXTERNAL_DOWNLOADS]: The skill references official NuGet packages (Scandit.DataCapture.IdCapture) and Scandit's official documentation domains. These are trusted resources belonging to the vendor/author 'scandit'.
- [DATA_EXFILTRATION]: While the skill explains how to access sensitive identity data (names, dates of birth, etc.) via the SDK's CapturedId object, it does so for the purpose of legitimate application development and includes specific guidance on data anonymization and redaction for compliance. No unauthorized data handling or exfiltration patterns were found.
Audit Metadata