matrixscan-ar-web

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a developer guide for the Scandit MatrixScan AR Web SDK, providing valid integration patterns and migration paths.
  • [CREDENTIALS_SAFE]: The skill follows security best practices by instructing the agent to mask license keys in chat and using clear placeholders (-- ENTER YOUR SCANDIT LICENSE KEY HERE --) in code examples.
  • [EXTERNAL_DOWNLOADS]: All external links and resources originate from the vendor's official infrastructure (scandit.com), verified GitHub repositories (github.com/Scandit), or well-known public registries (npmjs.com, jsdelivr.net).
  • [PROMPT_INJECTION]: Deterministic flags regarding concealment are false positives; the instructions pertain to protecting user secrets from exposure in chat logs and implementing standard UI behavior for dismissible warnings.
  • [COMMAND_EXECUTION]: The provided Python script is a transparent, local development utility designed to serve necessary security headers (COOP/COEP) during testing on localhost.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 04:48 PM