matrixscan-batch-android
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a developer-focused integration tool for the Scandit Android SDK. It provides structured guidance on API usage, camera setup, and threading models specific to the SDK.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the latest SDK version from Maven Central (central.sonatype.com) and references official documentation at docs.scandit.com. These sources are well-known technology services and official vendor domains, which is a safe and standard practice for dependency management.
- [COMMAND_EXECUTION]: The skill contains instructions for the agent to modify local project files directly rather than just displaying code. While this utilizes the agent's file-writing capabilities, it is within the expected functional scope of a coding-assistant skill and is performed for the primary purpose of SDK integration.
- [CREDENTIALS_UNSAFE]: The skill uses clear descriptive placeholders for license keys ("-- ENTER YOUR SCANDIT LICENSE KEY HERE --") in documentation and sample code. No actual hardcoded secrets or credentials were found.
Audit Metadata