dart-use-primary-constructors

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for Dart language features, specifically focusing on Primary Constructors introduced in recent Dart versions. All provided code examples are standard Dart syntax.
  • [DATA_EXPOSURE]: The skill mentions 'localhost' in a database service example (DatabaseService.local() : url = 'localhost'). This is a standard development configuration and complies with allowed domain usage for local development testing.
  • [COMMAND_EXECUTION]: The documentation references standard developer tooling such as dart fix and the use of the --enable-experiment=primary-constructors flag for the Dart analyzer. These are legitimate tools used within the Dart ecosystem and do not constitute a security risk.
  • [PROMPT_INJECTION]: No evidence of prompt injection, role-play bypasses, or instructions to ignore safety filters was found. The instructions are focused exclusively on assisting with Dart code refactoring.
  • [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process user-provided Dart code for refactoring (Ingestion point), the risk of indirect prompt injection is minimal given the technical nature of the task. The skill lacks explicit boundary markers or sanitization for input code, but its primary purpose is structural transformation of code, which is a low-risk capability.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 05:05 PM
Security Audit — agent-trust-hub — dart-use-primary-constructors