flutter-init
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Flutter and Dart CLI tools (
flutter create,flutter pub get,flutter analyze, anddart run build_runner) to manage project lifecycle and validation. These commands are essential for the skill's primary purpose of mobile application development. - [EXTERNAL_DOWNLOADS]: The skill specifies a list of well-known, high-reputation Dart packages (such as
riverpod,drift,dio, andfreezed) to be fetched from the official pub.dev registry. It also includes standard Android build configuration that fetches dependencies from Google's official Maven repository. - [DYNAMIC_EXECUTION]: Code generation is performed using the standard
build_runnerpackage, which is the idiomatic way to generate boilerplate for libraries like Freezed and Drift in the Flutter ecosystem. This process is restricted to local code generation based on defined templates. - [SAFE]: The skill includes references to
https://jsonplaceholder.typicode.com, which is a well-known and trusted service used for providing placeholder data for development and testing purposes. - [SAFE]: No patterns of prompt injection, data exfiltration, or obfuscation were detected. The project structure follows industry-standard 'Clean Architecture' principles.
Audit Metadata