id-capture-web
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides explicit instructions for the secure handling of license keys, recommending the use of a private MCP server or user input, and specifically advising against displaying full keys in the chat interface.
- [SAFE]: Instructions flagged as concealment are actually safety-focused guidelines to prevent the leaking of sensitive credentials (license keys) into logs or chat history.
- [SAFE]: External dependencies are restricted to official vendor packages (@scandit/*) and well-known, reputable services such as jsDelivr and NPM.
- [SAFE]: The skill includes a standard Python utility script for local testing that applies necessary security headers (COOP/COEP), which is a legitimate developer practice for testing WebAssembly-based SDKs.
- [SAFE]: The use of npx/pnpm for the 'serve' package is a standard development workflow for hosting static web content locally.
Audit Metadata