label-capture-cordova
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill incorporates security best practices for secret management, specifically instructing the agent to provide only masked previews of license keys and prohibiting searches for credentials in the local environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines integration logic for processing data from physical labels, creating a surface for potential injection via scanned text or barcodes.\n
- Ingestion points: Data is received through
LabelCaptureListenerandLabelCaptureValidationFlowListenercallbacks (SKILL.md, references/integration.md).\n - Boundary markers: The skill does not explicitly define delimiters for the extracted label data.\n
- Capability inventory: The integrated SDK provides access to camera frames via
getFrameDataand interacts with native system components (references/customization.md).\n - Sanitization: The skill relies on regex patterns to validate and extract specific fields from the scanned content (references/integration.md).\n- [EXTERNAL_DOWNLOADS]: The skill references official Scandit plugins and documentation repositories which are vendor-owned and within the expected scope of the tool's functionality.
Audit Metadata