matrixscan-batch-maui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow includes a runtime WebFetch of NuGet package pages (public web content) to read the latest stable SDK version, which can introduce outsider-authored free text into the agent’s LLM context via the fetched page content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to WebFetch the NuGet package page at runtime to read the latest stable SDK version (https://www.nuget.org/packages/Scandit.DataCapture.Barcode.Maui/) and to fetch Scandit API reference pages (e.g. https://docs.scandit.com/data-capture-sdk/dotnet.android/barcode-capture/api.html) when verifying APIs, so remote content is fetched during runtime and directly controls what code/versions the agent emits.