sentry-flutter-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the official
sentry-wizardutility via Homebrew from the vendor's repository (getsentry/tools/sentry-wizard). This is a standard and safe practice for the primary purpose of the skill. - [COMMAND_EXECUTION]: During the detection phase, the skill executes common shell commands such as
cat,grep,ls, andfindto identify the Flutter project type, existing dependencies (likedio,go_router,sqflite), and target platforms. These commands are non-privileged and used for context discovery. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it ingests and processes content from local project files (e.g.,
pubspec.yaml, source code) to guide its setup recommendations. - Ingestion points: Reads
pubspec.yaml,lib/main.dart, and directory structures usinggrepandlsinSKILL.mdPhase 1. - Boundary markers: None explicitly used for the output of discovery commands.
- Capability inventory: Uses discovery data to recommend
flutter pub addcommands and configuration changes tomain.dartandpubspec.yaml(seen inSKILL.mdPath B). - Sanitization: No specific sanitization of the file content is performed before presenting setup options to the user.
Audit Metadata