matrixscan-batch-cordova
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: A heuristic detector flagged potential concealment instructions. Manual review confirms these instructions are security best practices (masking license keys in chat and preventing the agent from searching the environment for secrets) rather than attempts to hide malicious behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill provides examples for processing and displaying barcode data (untrusted input). The provided integration code correctly uses
textContentwhen creating AR overlays, which is a secure pattern that prevents Cross-Site Scripting (XSS) or secondary injection attacks via the UI. - [COMMAND_EXECUTION]: The skill includes standard development commands for the Cordova CLI (
cordova plugin add,cordova prepare). These are necessary for the documented integration process and target the vendor's official plugins. - [EXTERNAL_DOWNLOADS]: All external references point to official Scandit documentation (
docs.scandit.com) or the vendor's public GitHub repositories. These are legitimate resources for the skill's primary purpose.
Audit Metadata