flutter-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill leverages the
fmt_evaluate_dart_expressiontool to execute code at runtime within the application's VM. This is an intended feature for developer inspection of application state. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data sourced from a running Flutter application, which represents a potential attack surface.
- Ingestion points: Application state and errors are ingested via
fmt_semantic_snapshot,fmt_get_app_errors, and tool outputs described inSKILL.md. - Boundary markers: No specific delimiters or safety instructions are defined to separate ingested data from agent instructions.
- Capability inventory: The skill includes tools to simulate user input, modify code via hot reload, and execute expressions.
- Sanitization: No explicit data sanitization or filtering is described for the information retrieved from the target application.
- [COMMAND_EXECUTION]: The documentation mentions using local CLI commands (
flutter-mcp-toolkit permissions) to manage macOS screen recording permissions, which is a standard procedure for UI testing and inspection tools.
Audit Metadata