matrixscan-count-maui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow includes a runtime WebFetch of a public NuGet page (outsider-authored free text) to extract the latest stable version, which can be ingested into the agent’s LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires performing WebFetch at runtime to live NuGet and Scandit docs URLs (e.g. https://www.nuget.org/packages/Scandit.DataCapture.Barcode.Maui/ and https://api.nuget.org/v3-flatcontainer/scandit.datacapture.barcode.maui/index.json and Scandit API pages like https://docs.scandit.com/data-capture-sdk/dotnet.android/barcode-capture/api.html) to determine the exact SDK version and to verify API signatures, so these external pages directly control the agent's instructions and are required at runtime.