sparkscan-cordova
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides documentation and integration guides for the Scandit SparkScan Cordova plugin. The provided instructions are consistent with professional software development practices for the target platform.
- [SAFE]: Instructions for handling license keys include specific privacy protections, such as masking the key in chat and avoiding searching the local environment for secrets, which protects user data from accidental exposure.
- [COMMAND_EXECUTION]: The skill provides standard Cordova CLI commands (e.g.,
cordova plugin add,cordova prepare) necessary for project setup and dependency management. These target legitimate plugin registries. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official Scandit Cordova plugins. These resources are vendor-owned and follow standard installation patterns for the framework.
- [PROMPT_INJECTION]: The skill uses instructional emphasis (e.g., "CRITICAL", "IMPORTANT") to ensure the agent uses provided reference materials instead of potentially outdated training data. The automated detector flagged a section regarding masking license keys as concealment; however, this is a security best practice to prevent sensitive data leakage in chat history, not a malicious bypass.
Audit Metadata