e2e-testing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install several packages and tools, including npm packages (flutter-skill, flutter-skill-react-native, flutter-skill-electron), Homebrew formulae (ai-dashboad/flutter-skill), and SDKs from Maven/NuGet. These resources are official components provided by the author ai-dashboad.
- [COMMAND_EXECUTION]: The skill involves the execution of various CLI commands such as
flutter-skill initto patch projects andflutter-skill launchto start the testing bridge. It also requires configuring the AI agent to execute theflutter-skill serverbinary. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection because it ingests data from external running applications that the agent then acts upon. \n
- Ingestion points: Application UI elements are retrieved via
inspect_interactive(), application logs viaget_logs(), and visual states viascreenshot(). \n - Boundary markers: The skill does not provide instructions to the agent to treat data from the app (such as button labels, text field values, or log messages) as untrusted content that should not be followed as instructions. \n
- Capability inventory: The agent has the ability to perform impactful actions like
tap(),enter_text(), andpress_key()based on its interpretation of the app's state. \n - Sanitization: There is no evidence of filtering or sanitization of the content extracted from the application environment.
Audit Metadata