skills/ariaramin/flutter-skills/flutter-local-notifications-production-engineering/Gen Agent Trust Hub
flutter-local-notifications-production-engineering
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns were detected. The skill consists of technical documentation and code examples that strictly follow security best practices for Flutter development.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies notification payloads as a potential surface for processing untrusted data. It provides detailed remediation and defensive coding patterns, such as strict JSON parsing, allowlisting types, and re-verifying authorization on the application side before taking action (Section 39 and Example 1), which effectively secures this attack surface.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes explicit instructions and checklists (Section 53, 54, and 72) to prevent the inclusion of secrets, tokens, or PII in notification payloads, and to review notification content for lock-screen privacy risks.
Audit Metadata