matrixscan-batch-net-maui
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches SDK version information from NuGet (nuget.org), a well-known and trusted package registry, to ensure that the integration uses the most recent stable software versions.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (NuGet) to determine SDK versions. 1. Ingestion points: WebFetch calls to nuget.org in SKILL.md and integration.md. 2. Boundary markers: Absent. 3. Capability inventory: Project file modification (.csproj). 4. Sanitization: Instructions guide the agent to extract only the version string. Given that the source is a trusted registry and the data is used for versioning, this is assessed as safe.
- [SAFE]: The skill includes explicit security instructions for the agent to protect user Scandit license keys by masking them in output and strictly avoiding unauthorized searches for secrets in the local filesystem or environment variables.
Audit Metadata