state-management
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and expert-level documentation for Flutter state management using industry-standard libraries (Riverpod, Bloc, Cubit).
- [EXTERNAL_DOWNLOADS]: The skill references and downloads information from the official Dart package registry (pub.dev), which is a well-known and trusted service for Flutter development.
- [COMMAND_EXECUTION]: Instructions recommend using standard Flutter CLI tools such as
flutter pub add,flutter pub upgrade, anddart run build_runner. These are standard developer workflows and do not involve arbitrary or dangerous command execution. - [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration was found. The skill's data access is limited to reading local project configuration files (
pubspec.yaml,pubspec.lock) to ensure version compatibility. - [PROMPT_INJECTION]: The skill uses natural instructional language to guide the AI's behavior as a Flutter expert. No override or bypass markers were detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests untrusted project data (lock files), it does so to extract version strings for standard tooling. There is no execution of content from these files that would lead to injection attacks. (Ingestion: pubspec.lock; Boundaries: None; Capabilities: flutter/dart CLI; Sanitization: None).
Audit Metadata