flutter-clean-arch
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a template and educational resource for Flutter development. Analysis of the core instructions and reference files reveals no malicious patterns.
- [SAFE]: Networking patterns using Dio and Retrofit include security-focused interceptors for authentication and logging. The instructions explicitly recommend validating API response structures and enforcing HTTPS in production environments.
- [DATA_EXPOSURE]: The skill provides examples of authentication headers and token management (e.g., in
auth_interceptor.dart), but these use standard placeholders and patterns for developer guidance rather than hardcoded credentials. - [DYNAMIC_EXECUTION]: The documentation mentions the use of
build_runnerfor code generation. This is a standard development tool in the Flutter ecosystem used to generate boilerplate for libraries like Freezed and Retrofit; it does not involve runtime execution of untrusted code. - [INDIRECT_PROMPT_INJECTION]: While the skill describes handling external data from APIs, it provides robust mitigation strategies such as response validation, input sanitization, and content-type checking at the data layer boundary.
Audit Metadata