persian-number-utility
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and processing of untrusted user input, such as Iranian National Codes, bank card numbers, and mobile numbers, which creates a surface for indirect prompt injection.
- Ingestion points: Data entering the application through
TextFormFieldinputs or raw strings processed by the extension methods documented inSKILL.md. - Boundary markers: The instructions recommend using
.toEnglishDigit()and specificRegExppatterns to enforce data boundaries before validation logic is applied. - Capability inventory: The skill's operations are restricted to string manipulation, regex-based checksum validations (Luhn/Modulo 11), and basic arithmetic within the Flutter/Dart environment.
- Sanitization: Emphasizes input normalization via
.toEnglishDigit(), character stripping via.extractNumber(), and manual regex checks to sanitize user-provided data.
Audit Metadata