flutter-mcp-automation-chain
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command that downloads a shell script from the author's GitHub repository and executes it directly by piping it to bash. Evidence:
curl -fsSL https://raw.githubusercontent.com/Arenukvern/mcp_flutter/main/install.sh | bashin SKILL.md. - [EXTERNAL_DOWNLOADS]: The documentation directs users to download and install packages and tools from external sources, specifically the author's repositories and the Dart package registry. Evidence: Mentions of
flutter_mcp_harnessand theokatool repository. - [COMMAND_EXECUTION]: The skill contains several examples of CLI commands intended for the user to run in their local environment to manage their Flutter project lifecycle. Evidence: Commands such as
flutter-mcp-toolkit init,oka build apk, andoka devare documented for use.
Audit Metadata