flutter-secure-storage-security-engineering
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze and modify external source code and project configurations, creating a surface for indirect prompt injection where malicious instructions could be embedded in the data being processed.
- Ingestion points: The agent is directed to read repository files, including
pubspec.yaml, lockfiles, and application source code to identify storage implementations and platform configurations (SKILL.md,references/05-antipatterns-workflows-checklists.md). - Boundary markers: The skill lacks explicit boundary markers or instructions to isolate the agent from natural language instructions that might be present in analyzed comments or code.
- Capability inventory: The agent has the ability to implement new security logic and refactor existing storage implementations, providing a mechanism for injected instructions to influence code output.
- Sanitization: No specific sanitization or filtering of instructions within the analyzed repository is mandated.
Audit Metadata