label-capture-android
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard technical support tool for the Scandit SDK. It directs the AI agent to retrieve information from official vendor domains such as docs.scandit.com and github.com/Scandit.
- [PROMPT_INJECTION]: Heuristic detection flagged instructions aimed at concealing information (e.g., "Do not tell the user to check the docs themselves"). Analysis confirms these are benign quality-of-service instructions intended to ensure the agent performs the lookup on behalf of the user for a better experience, followed by providing the source link for transparency.
- [EXTERNAL_DOWNLOADS]: The skill references official SDK documentation and sample code repositories. These are verified vendor resources and do not represent a security risk.
- [COMMAND_EXECUTION]: The skill provides instructions for standard Android development tasks, such as updating Gradle dependencies and modifying the AndroidManifest.xml for camera permissions. No dangerous command execution or privilege escalation vectors were identified.
- [DATA_EXFILTRATION]: No exfiltration patterns were detected. The skill uses clearly marked placeholders for license keys and directs users to the official Scandit portal for credential management.
Audit Metadata