The Agent Skills Directory

[SAFE]: The skill is a legitimate developer utility for integrating the Scandit SDK into web applications. The instructions provided are technically accurate and focus on SDK configuration, regex patterns for OCR, and UI implementation.
[CREDENTIALS_SAFE]: The skill demonstrates strong security posture regarding secrets. It explicitly instructs the agent to mask license keys in chat and suggests using environment variables or a dedicated MCP server for key management rather than hardcoding or searching for keys in the project.
[EXTERNAL_DOWNLOADS]: The skill references official Scandit npm packages (@scandit/web-datacapture-*) and utilizes the well-known jsDelivr CDN for serving SDK files. All GitHub references point to the official Scandit organization, which is consistent with the skill's purpose.
[COMMAND_EXECUTION]: The references/integration.md file includes a small Python helper script and npx serve commands. These are intended for local development to ensure the correct Cross-Origin-Opener-Policy (COOP) and Cross-Origin-Embedder-Policy (COEP) headers are served, which are prerequisites for the SDK's multithreading capabilities.
[PROMPT_INJECTION]: The static detector's flag regarding 'PI_CONCEALMENT' is a false positive. The 'concealment' mentioned in the skill refers to the security best practice of masking sensitive license keys and the UX best practice of not showing the same multithreading warning dialog multiple times in a single session.

label-capture-web