flutter-engineering
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development tools such as Flutter, FastAPI (uvicorn), and Firebase CLI to manage projects. The command execution is implemented securely in
scripts/_skill_cli.pyusingsubprocess.runwithshell=Falseand absolute path resolution viashutil.whichto prevent shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The
ensure_fluttertool initiates dependency downloads from the official Dart package registry viaflutter pub get. This is standard and expected behavior for the supported development stacks. - [COMMAND_EXECUTION]: The skill includes functionality to execute local Python scripts from a sibling directory (
project-engineering) to perform cross-stack scaffolding and testing. These are identified as vendor-owned resources within the HeyEddi-com ecosystem and represent standard tool integration.
Audit Metadata