matrixscan-ar-android
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate development tool for integrating Scandit's MatrixScan AR SDK. It provides Kotlin and Gradle code snippets and follows standard Android development patterns without any detected malicious patterns.
- [COMMAND_EXECUTION]: The skill utilizes specific tools (
ensure_scanner_setup,get_license_key,list_license_keys) to interact with a vendor-hosted MCP server (ssl.scandit.com) for license provisioning. These actions are limited to trial key generation and include user confirmation steps for non-trial keys, aligning with the skill's documented purpose. - [CREDENTIALS_UNSAFE]: The skill implements positive security controls by explicitly instructing the agent to mask license keys in the chat and prohibiting the agent from searching local project files for existing credentials. These measures effectively reduce the risk of accidental exposure or exfiltration of production secrets.
Audit Metadata