flutter-mcp-toolkit-maintain-web
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious instructions, obfuscation, or unauthorized access patterns were detected. The skill's functionality is consistent with its stated purpose of maintaining a development environment.
- [COMMAND_EXECUTION]: The skill uses
dart runto execute project-local scripts (e.g.,mcp_server_dart/bin/flutter_mcp_toolkit.dart) and standard tools likemakeandgrepfor maintenance tasks. These actions are within the scope of a developer-oriented toolkit. - [INDIRECT_PROMPT_INJECTION]: The skill includes logic to extract information from local logs. Ingestion points: The skill uses
grepto read from.showcase/web_app.log. Boundary markers: None explicit. Capability inventory: Execution of local Dart scripts and Make commands for codegen and runtime validation. Sanitization: The use of a specific regex in thegrepcommand restricts the ingested data to valid WebSocket URIs. Given the local nature of the source, this represents a safe operation.
Audit Metadata