matrixscan-ar-net-ios
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides integration and migration documentation for the Scandit SDK. It identifies itself as authored by 'scandit' and refers exclusively to official Scandit documentation and infrastructure.
- [SAFE]: License key handling instructions incorporate security best practices. The agent is directed to mask sensitive keys in the user interface and is explicitly forbidden from searching the local environment or project files for credentials, which prevents unauthorized credential harvesting.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the latest package version from the official NuGet registry (nuget.org). This is a standard and safe operation within a development workflow targeting a well-known service.
- [PROMPT_INJECTION]: The skill uses instructional headers like 'Critical: Do Not Trust Internal Knowledge' to ensure technical accuracy by prioritizing provided reference material over potentially outdated training data. This is a benign use of instructional emphasis intended to prevent code hallucinations, rather than an attempt to bypass safety guardrails.
Audit Metadata