flutter-path-provider-production-storage
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a defensive security guide for Flutter developers. It explicitly identifies and provides mitigations for several high-risk patterns, including hardcoded filesystem roots, path traversal via untrusted user input, and the insecure storage of credentials in plain files.
- [INDIRECT_PROMPT_INJECTION]: The skill manages an attack surface where untrusted data (such as filenames or paths) enters the application context. It provides robust sanitization guidelines to mitigate this risk.
- Ingestion points: Processes external identifiers and filenames in filesystem operations (e.g., references/03-security-privacy-lifecycle-migrations.md).
- Boundary markers: Recommends using controlled application identifiers and alphanumeric extensions to delimit path segments.
- Capability inventory: Includes file read/write, directory creation, and recursive deletion capabilities (references/02-portable-paths-io-cache.md).
- Sanitization: Provides explicit code examples using RegExp to validate input and package:path for normalization.
Audit Metadata