label-capture-cordova
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for developers using the Scandit SDK. It contains standard integration steps for Cordova/PhoneGap, including plugin installation, permission handling, and code examples for initializing and configuring the scanning engine.
- [PROMPT_INJECTION]: The static detector flag regarding concealment is a false positive. The instruction 'Do not tell the user to check the docs themselves' is a directive for the agent to provide direct information rather than being dismissive, which is standard for high-utility AI assistants. It does not attempt to bypass safety guidelines or hide malicious activity.
- [CREDENTIALS_UNSAFE]: The skill correctly uses placeholders for sensitive data, such as '-- ENTER YOUR SCANDIT LICENSE KEY HERE --', and instructs the user to replace it before shipping, which is a secure practice.
- [EXTERNAL_DOWNLOADS]: All external references target official vendor resources, including 'docs.scandit.com', 'ssl.scandit.com', and the official Scandit GitHub organization ('github.com/Scandit'). These are legitimate developer resources for the stated author of the skill.
Audit Metadata