flutter-add-integration-test

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate instructions for setting up Flutter integration tests using the official integration_test and flutter_test packages. All recommended actions, such as adding dependencies via flutter pub add and enabling the driver extension, are standard practices in the Flutter ecosystem.
  • [COMMAND_EXECUTION]: The skill mentions common Flutter development commands including flutter pub add, flutter drive, and flutter build apk. These are necessary for managing dependencies and running the tests on various platforms like Chrome, Android, and Firebase Test Lab.
  • [DATA_EXPOSURE]: One example script (test_driver/perf_driver.dart) includes code to write performance timeline data to a local file using writeTimelineToFile. This is a standard feature of the Flutter Driver for performance analysis and does not access or exfiltrate sensitive user information.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where an AI agent uses MCP tools (like get_widget_tree and tap) to explore and interact with a Flutter application. While this involves the agent processing external data (the widget tree), it is the primary intended function of the skill for UI testing, and the interactions are scoped to the development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 05:40 PM
Security Audit — agent-trust-hub — flutter-add-integration-test