matrixscan-ar-flutter
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions for the AI agent to prioritize provided reference material over its own training data and to apply code changes directly to the project. While a static detector flagged potential concealment, the instructions are benign, aiming to make the agent more helpful by providing direct answers and documentation links rather than forcing the user to search externally.
- [EXTERNAL_DOWNLOADS]: All external links point to official Scandit domains (docs.scandit.com) or their verified GitHub organization (github.com/Scandit). These are legitimate resources for the skill's purpose and do not represent a security risk.
- [CREDENTIALS_UNSAFE]: Code examples and fixtures use a standard placeholder for the license key ('-- ENTER YOUR SCANDIT LICENSE KEY HERE --'). No sensitive credentials or API keys are exposed.
- [DATA_EXFILTRATION]: There is no evidence of unauthorized data access or transmission. The code correctly handles camera permissions using the standard permission_handler package, which is necessary for barcode scanning functionality.
- [REMOTE_CODE_EXECUTION]: The skill provides Flutter/Dart source code for integration but does not include patterns for downloading and executing arbitrary scripts or binaries.
Audit Metadata