flutter-cicd
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill incorporates external code via well-known and trusted GitHub Actions. These include official actions such as
actions/checkoutandactions/setup-java, as well as widely-used community actions likesubosito/flutter-actionandcodecov/codecov-actionfor environment setup and reporting. - [COMMAND_EXECUTION]: The provided templates execute standard development CLI tools including
flutter,dart,gradle, andfastlane. These operations are limited to the intended build and test workflows described in the skill. - [DATA_EXFILTRATION]: The skill integrates with Codecov for test coverage reporting, which involves transmitting coverage data to a well-known third-party service. This is standard behavior for CI/CD pipelines.
- [CREDENTIALS_UNSAFE]: The skill provides explicit instructions and best practices for secure secret management, advising against committing sensitive files (like keystores or .p8 certificates) and recommending the use of secure vaults or environment-based secrets.
Audit Metadata