dart-args-production-cli
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructional content and code templates for the official
package:argsDart package. All referenced documentation links point to authoritative sources such as pub.dev and official Dart/Flutter repositories. - [SAFE]: It includes a dedicated security section that correctly identifies risks associated with command-line arguments, such as exposure in shell history, process inspection, and CI logs, and provides appropriate remediation advice (e.g., using secret stores or stdin).
- [SAFE]: The architecture guidelines emphasize a 'Typed Configuration Boundary', which ensures that raw user input is validated and converted into typed application data before reaching the business logic, reducing the risk of injection or malformed data handling.
- [SAFE]: It explicitly warns against using
package:argsfor web query parameters or mobile deep links, preventing the misuse of CLI parsing logic in contexts where it could lead to security vulnerabilities.
Audit Metadata