flutter
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous command-line instructions for managing Flutter projects, including building artifacts, running tests, and performing static analysis. These are standard developer operations for the framework.
- [PERSISTENCE]: The documentation includes instructions for users to manually add the Flutter SDK to their system PATH by modifying shell configuration files such as
.bashrc,.zshenv, or.zprofile. These instructions are standard for software installation and correctly guide the user through environment setup. - [EXTERNAL_DOWNLOADS]: The skill references downloading tools, packages, and SDK components from trusted sources, including official Google and Flutter domains (storage.googleapis.com, flutter.dev) and established registries like pub.dev. It also includes a reference to cloning the official Flutter repository via Git.
- [SAFE]: Mentions of the author's own related resources, such as fandhe-frontend, are used in a purely descriptive and clarifying context to distinguish them from standard Flutter APIs.
- [SAFE]: The documentation explicitly provides security best practices, such as warning against hardcoding API keys in source code and recommending the use of CI/CD secret management.
Audit Metadata