matrixscan-ar-cordova
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads Scandit SDK components and technical documentation from official vendor resources, including
docs.scandit.comand the Scandit GitHub organization. These references target the vendor's own verified infrastructure. - [COMMAND_EXECUTION]: Instructions guide the agent to use the Cordova CLI for managing project dependencies and synchronizing native artifacts (
cordova plugin add,cordova prepare). These are routine developer tasks within the Cordova ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill performs file-editing operations on user-provided application code to implement scanning logic. While this creates a surface where the agent could ingest untrusted data from user files, the skill mitigates this by providing strict API reference requirements and requiring the agent to maintain existing code structures during modification.
Audit Metadata