sparkscan-net-android
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch package version information from NuGet (
nuget.org), a well-known and trusted service for .NET dependencies. It also references official documentation from the author's domain (scandit.com). - [COMMAND_EXECUTION]: The documentation provides standard developer commands such as
dotnet newanddotnet restorefor project setup and dependency management, which are appropriate for the skill's purpose. - [PROMPT_INJECTION]: Deterministic detectors flagged instructions to limit output to relevant changes as potential 'concealment'. However, analysis shows these are benign guidelines intended to provide concise, helpful, and focused responses to developers.
- [CREDENTIALS_UNSAFE]: The skill follows best practices by using descriptive placeholders (e.g.,
-- ENTER YOUR SCANDIT LICENSE KEY HERE --) for sensitive information like license keys, rather than hardcoding credentials. - [DATA_EXFILTRATION]: While the skill involves processing barcode data, the provided code samples demonstrate standard industry practices such as logging results or performing retail-oriented lookups. No unauthorized data exfiltration patterns were detected.
Audit Metadata