label-capture-rn
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical integration guide for the Scandit Label Capture SDK. It provides accurate React Native-specific instructions and correctly distinguishes the mobile SDK behavior from web equivalents.
- [SAFE]: All external URL references target official vendor domains (
docs.scandit.com,ssl.scandit.com) or the vendor's official GitHub repository (github.com/Scandit). These are consistent with the skill author 'scandit'. - [SAFE]: Node.js package dependencies (
scandit-react-native-datacapture-*) are official Scandit modules required for the skill's stated functionality. No suspicious or typosquatted packages were identified. - [SAFE]: Credential management instructions follow best practices, using a placeholder string (
-- ENTER YOUR SCANDIT LICENSE KEY HERE --) and directing users to the official developer dashboard for key generation. - [SAFE]: The static detector flag regarding prompt injection concealment is a false positive. The instruction 'Do not tell the user to check the docs themselves' is a standard quality-of-service guideline for AI agents to provide direct assistance, which is immediately followed by a mandate to 'always include the relevant link so the user can explore further'.
Audit Metadata