dart-setup-ffi-assets
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Recommends the installation of necessary build toolchains using privileged commands, specifically
sudo apt install build-essentialfor Linux environments to enable local C/C++ compilation. - [EXTERNAL_DOWNLOADS]: Implements a mechanism for fetching platform-specific dynamic libraries from a remote repository on GitHub using the
HttpClientclass. The implementation demonstrates how to resolve URLs dynamically based on the target operating system and architecture. - [REMOTE_CODE_EXECUTION]: Facilitates the loading and execution of native machine code into the Dart runtime via the Native Assets hook system. The skill mitigates risks associated with remote code execution by including mandatory MD5 hash verification logic to validate the integrity of downloaded assets against a local lookup table before they are registered as executable assets.
Audit Metadata