networking
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The instructions promote security best practices by explicitly warning against hardcoding API keys and base URLs in source code, recommending the use of environment variables instead.
- [SAFE]: The skill includes guidance on preventing data exposure through logging by recommending that sensitive headers be redacted and that logging be restricted to debug builds using
kDebugMode. - [SAFE]: It correctly identifies and warns against the security risk of disabling TLS certificate validation (
badCertificateCallback), which is essential for protecting against intercept attacks. - [SAFE]: All referenced libraries (dio, retrofit, etc.) are standard, reputable packages from the official Flutter/Dart ecosystem.
Audit Metadata