matrixscan-count-capacitor

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a technical guide for integrating Scandit's BarcodeCount feature into Capacitor applications. All external references target official vendor infrastructure, including documentation at docs.scandit.com, license management at ssl.scandit.com, and official samples on GitHub (github.com/Scandit).
  • [PROMPT_INJECTION]: The skill includes instructions to the agent to prioritize provided reference files over internal training data to ensure API accuracy. It also contains workflow directives such as "Do not just show the code in chat; apply it to the file" and "Do not tell the user to check the docs themselves." These are standard instructional patterns for coding agents to improve utility and reduce response latency, rather than malicious attempts to bypass safety guardrails or hide behavior.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided information such as symbology preferences and project file structures to generate integration code. While this represents an attack surface where untrusted data could influence agent output, the skill lacks high-privilege primitives or network exfiltration paths that would make this exploitable for malicious purposes. The scope is limited to generating standard SDK configuration code.
  • [COMMAND_EXECUTION]: The skill mentions standard development commands such as npm install and npx cap sync. These are necessary steps for the intended Capacitor development workflow and are executed in the context of installing verified vendor packages.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:32 PM
Security Audit — agent-trust-hub — matrixscan-count-capacitor