entrig-flutter
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard development tools including
flutter,pod, anddartto manage dependencies and perform native iOS setup. It specifically usesfindto locate the package's local documentation in the pub cache to verify requirements, which is a common developer workflow. - [EXTERNAL_DOWNLOADS]: The skill installs the
entrigpackage from the official Dart registry (pub.dev) and connects to a vendor-provided MCP server atmcp.entrig.com. These are legitimate resources owned by the vendor or trusted community registries. - [CREDENTIALS_UNSAFE]: Security is well-handled; the instructions provide clear warnings against committing API keys to source control and guide the user through using
.envfiles or--dart-definefor secure credential management. - [SAFE]: The skill requires editing sensitive files like
AppDelegate.swiftandInfo.plist, but these modifications are limited to the specific logic required for push notification registration and follow standard integration patterns for the platform.
Audit Metadata