matrixscan-count-net-android
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves its primary purpose of documenting SDK integration. The code snippets provided are standard C# for .NET Android development and do not exhibit malicious behavior.
- [CREDENTIALS_SAFE]: The skill explicitly instructs the agent to avoid exfiltrating license keys from the environment or local files. It mandates the use of a secure MCP server for key management and requires the agent to mask keys in chat output, which is a defensive security practice.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch package information and documentation from well-known and trusted services, specifically NuGet (
nuget.org) and the vendor's official documentation site (scandit.com). - [INDIRECT_PROMPT_INJECTION]: While the skill generates code to ingest external barcode data (an attack surface), the logic is confined to counting and UI rendering within the target application. There is no evidence of this data being fed back into the LLM's prompt to influence autonomous agent behavior.
Audit Metadata