sparkscan-kmp
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from physical barcodes, which are attacker-controllable external sources. The integration logic in
references/integration.mdreads and stores this data without sanitization, creating a potential vector for indirect prompt injection if the scanned strings are subsequently processed by an LLM.\n - Ingestion points: Barcode data is accessed via
session.newlyRecognizedBarcodein theonBarcodeScannedmethod.\n - Boundary markers: No delimiters or protective instructions are used to isolate the barcode data from the rest of the application context.\n
- Capability inventory: The skill manages camera access for scanning and automated dependency resolution via build tools.\n
- Sanitization: Raw barcode content is handled as a plain string without escaping or validation.\n- [EXTERNAL_DOWNLOADS]: Fetches official software development kits and configurations from the vendor's distribution channels.\n
- Evidence: Downloads components from
https://github.com/Scandit/datacapture-kmp-spmand Maven Central using thecom.scandit.datacapture.kmpgroup ID.
Audit Metadata