matrixscan-count-capacitor
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical guide for integrating Scandit's BarcodeCount feature into Capacitor applications. All external references target official vendor infrastructure, including documentation at
docs.scandit.com, license management atssl.scandit.com, and official samples on GitHub (github.com/Scandit). - [PROMPT_INJECTION]: The skill includes instructions to the agent to prioritize provided reference files over internal training data to ensure API accuracy. It also contains workflow directives such as "Do not just show the code in chat; apply it to the file" and "Do not tell the user to check the docs themselves." These are standard instructional patterns for coding agents to improve utility and reduce response latency, rather than malicious attempts to bypass safety guardrails or hide behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided information such as symbology preferences and project file structures to generate integration code. While this represents an attack surface where untrusted data could influence agent output, the skill lacks high-privilege primitives or network exfiltration paths that would make this exploitable for malicious purposes. The scope is limited to generating standard SDK configuration code.
- [COMMAND_EXECUTION]: The skill mentions standard development commands such as
npm installandnpx cap sync. These are necessary steps for the intended Capacitor development workflow and are executed in the context of installing verified vendor packages.
Audit Metadata