build-agent-dart
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive security instructions for Dart and Flutter development. It explicitly mandates the use of
flutter_secure_storagefor credentials and theencryptpackage for data protection. It also includes specific 'Halt Conditions' to prevent the deployment of code containing hardcoded secrets or unauthorized platform permissions. - [INDIRECT_PROMPT_INJECTION]: The skill has a potential attack surface as it processes external requirement documents (REQ-XXXX) to generate code and execute build/test commands. However, this risk is significantly mitigated by the inherited 'Red Team Protocol' and mandatory 'Human Gates' which require manual approval for ambiguous requirements and critical architecture changes.
- Ingestion points: Processes external requirement IDs (REQ-XXXX) and
pubspec.yamldependency files. - Boundary markers: Utilizes explicit requirement linking in source code headers and a formal Build Manifest to track lineage.
- Capability inventory: Executes shell commands for
flutter build,flutter test, andbuild_runnercode generation. - Sanitization: Includes specific instructions for input validation using regular expressions and mandates data validation for platform channel communication.
Audit Metadata