contentsquare-flutter-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill instructs the agent to perform a project health check by sending data source IDs or bundle identifiers to
mobile-production.content-square.net. This is a vendor-owned domain, and the operation is a core part of the skill's primary purpose for configuration verification. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates untrusted data from user input and project files into shell commands used for the health check.
- Ingestion points: Project identifiers extracted from
build.gradleandproject.pbxprojfiles, or data source IDs provided by the user. - Boundary markers: None present.
- Capability inventory: Execution of
curlcommands via the shell. - Sanitization: No explicit sanitization or validation of the identifiers is performed before inclusion in the health check URL.
Audit Metadata