entrig-flutter

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard development tools including flutter, pod, and dart to manage dependencies and perform native iOS setup. It specifically uses find to locate the package's local documentation in the pub cache to verify requirements, which is a common developer workflow.
  • [EXTERNAL_DOWNLOADS]: The skill installs the entrig package from the official Dart registry (pub.dev) and connects to a vendor-provided MCP server at mcp.entrig.com. These are legitimate resources owned by the vendor or trusted community registries.
  • [CREDENTIALS_UNSAFE]: Security is well-handled; the instructions provide clear warnings against committing API keys to source control and guide the user through using .env files or --dart-define for secure credential management.
  • [SAFE]: The skill requires editing sensitive files like AppDelegate.swift and Info.plist, but these modifications are limited to the specific logic required for push notification registration and follow standard integration patterns for the platform.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 12:25 PM