matrixscan-count-flutter
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation and code generation tool for the Scandit BarcodeCount SDK in Flutter. All external references and domains (e.g., scandit.com, github.com/Scandit) are official vendor resources belonging to the author.
- [SAFE]: License key management instructions are security-conscious, requiring the agent to use placeholders, mask keys in chat, and explicitly forbidding the agent from searching the project's environment or files for existing credentials.
- [SAFE]: The identified prompt injection hint regarding concealment is a false positive. The instruction to "Show at most a masked preview in chat; never print a full key" is a privacy protection measure intended to safeguard user secrets from being exposed in logs or chat history, rather than a malicious attempt to hide actions from the user.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided symbologies and target barcode lists. While this represents an attack surface for indirect prompt injection, the skill is instructional in nature and generates static code based on vendor templates, presenting minimal risk. Boundaries are maintained by focusing on specific API references provided within the skill.
Audit Metadata