matrixscan-count-capacitor
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates the integration of official Scandit SDK components. All referenced URLs (docs.scandit.com, ssl.scandit.com, and github.com/Scandit) and npm packages are verified resources owned by the vendor 'scandit'.
- [SAFE]: The instructions incorporate proactive security measures for handling sensitive license keys, including requirements for masking keys in chat and explicit prohibitions against searching the filesystem or environment for credentials.
- [COMMAND_EXECUTION]: The skill instructs the user to run standard development commands such as 'npx cap sync' to synchronize native project artifacts. This is a routine and necessary part of the Capacitor development workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured data from external sources (such as packing slips) and scanned barcode results. This represents an indirect prompt injection surface; however, the data is used in a controlled manner for SDK-specific logic, and the skill does not grant the agent high-privilege capabilities that could be exploited via this vector.
Audit Metadata