matrixscan-ar-rn
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions and reference files point to official Scandit documentation (docs.scandit.com) and license management portals (ssl.scandit.com). It also guides users to install legitimate vendor-authored packages including
scandit-react-native-datacapture-coreandscandit-react-native-datacapture-barcodefrom standard registries. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling external barcode data through the
BarcodeArListenerandBarcodeArSessioninterfaces inreferences/integration.md(Step 5). - Ingestion points: The
didUpdateSessioncallback receivesTrackedBarcodeobjects containing untrusted data from scanned barcodes. - Boundary markers: No specific boundary markers or 'ignore' instructions are suggested for the barcode content itself.
- Capability inventory: The provided examples include logging data to the console and updating React state (
setResults,setScanCount). No file-system writes or privileged network operations are performed using this data. - Sanitization: No sanitization is implemented for the barcode data.
- Analysis: While this constitutes a data ingestion surface, it is the fundamental purpose of a barcode scanning skill. There is no evidence of unsafe interpolation into sensitive sinks, and the risk is assessed as safe within the context of the provided templates.
Audit Metadata