dart-flutter-ffi-systems-engineering
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and package registries from trusted organizations, including Google (Dart/Flutter/Android), Apple, Microsoft, and LLVM. These references are used for technical guidance and are handled as safe, well-known services.
- [COMMAND_EXECUTION]: The skill discusses the use of Dart build hooks and native toolchains (CMake, Gradle, MSBuild) to compile source code. It includes robust security instructions warning against downloading unpinned remote artifacts and advising on secure library search paths to prevent DLL preloading attacks.
- [DATA_EXFILTRATION]: Contains explicit security guidelines for handling sensitive data, instructing developers to minimize the lifetime of secrets in native memory, avoid logging buffers containing secrets, and use zeroization primitives where appropriate.
- [DYNAMIC_EXECUTION]: The skill covers FFI, which involves dynamic loading of native libraries. It provides a detailed safety framework including ownership matrices, lifecycle management (NativeFinalizer, explicit close), and range validation to ensure these operations are performed securely.
Audit Metadata