matrixscan-ar-maui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow includes a WebFetch of NuGet pages (public web content) to read the latest stable SDK version, which can ingest outsider-authored free text into the agent’s LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to perform runtime WebFetches (e.g., https://www.nuget.org/packages/Scandit.DataCapture.Barcode.Maui/) and to fetch Scandit API pages (docs.scandit.com and api.nuget.org links) to determine the exact SDK version and API pages before producing code, so these external URLs are used at runtime and directly control the agent's outputs.