matrixscan-ar-android
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided input (such as desired barcode symbologies and target activity/fragment files) to generate and apply SDK integration code.
- Ingestion points: User input collected during the integration flow in
references/integration.md. - Boundary markers: The skill provides structured templates and specific API usage policies in
SKILL.mdto guide the code generation process. - Capability inventory: The agent is instructed to write integration code to project files based on the integration guide.
- Sanitization: The instructions emphasize using only explicitly documented APIs from the provided references to prevent the insertion of arbitrary or hallucinated code.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch SDK versioning information and documentation from official and well-known sources.
- Findings: The skill references Scandit's official documentation at
docs.scandit.com, licensing portal atssl.scandit.com, and sample code atgithub.com/Scandit. It also suggests checking Maven Central (central.sonatype.com) for the latest SDK versions. These are trusted vendor resources and established developer services.
Audit Metadata