dart-setup-ffi-assets
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill describes a workflow for downloading precompiled native libraries (e.g., .dylib, .so, .dll) from remote GitHub repositories during the build process. While this involves fetching external binaries, the implementation includes explicit integrity verification using MD5 hashes to prevent tampering.
- [REMOTE_CODE_EXECUTION]: The skill facilitates the bundling and execution of native machine code within the Dart environment. This is the primary intended purpose of the Native Assets feature. The skill mitigates risks by recommending local compilation as a preferred method and implementing mandatory integrity checks for any remotely sourced binaries.
- [COMMAND_EXECUTION]: The instructions involve the use of standard development tools and CLI commands, such as
dart pub addfor dependency management anddart testfor triggering build hooks. It also guides the user in installing necessary system toolchains (Xcode, GCC, MSVC) for local compilation. The skill specifically advises against using raw shell commands (e.g.,gcc,clang) within the build hooks, favoring programmatic APIs frompackage:native_toolchain_c.
Audit Metadata