sparkscan-net-android
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the latest SDK version metadata from NuGet's official repository (
nuget.org) using theWebFetchtool. This is a standard operation to retrieve versioning information from a well-known, trusted package registry. - [CREDENTIALS_UNSAFE]: The skill provides procedures for handling Scandit license keys. It explicitly directs the agent to mask keys in the chat interface and never display a full key, which is a defensive measure to prevent credential leakage.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including NuGet version strings and user-provided license keys. While this represents a potential data ingestion surface, the skill limits the data's use to specific technical configuration parameters, reducing the risk of malicious instruction execution.
Audit Metadata