sparkscan-kmp
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code snippets for the Scandit KMP SDK. It follows standard developer documentation patterns for mobile application development.
- [SAFE]: The skill uses a provided MCP server (ssl.scandit.com) for license key management, which is a legitimate vendor service. The instructions emphasize that keys should be handled securely (masked in chat) and not searched for in local files.
- [SAFE]: External references point to official Scandit domains (docs.scandit.com, ssl.scandit.com) and official GitHub repositories (Scandit/datacapture-kmp-spm). These are trusted vendor sources.
- [SAFE]: The 'Prompt Injection' detector flag regarding 'concealing actions' is a false positive; the instructions advise on standard background management of camera lifecycles (onResume/onPause) and SDK cleanup, which are required for mobile performance and privacy best practices, not for malicious concealment.
Audit Metadata