flutter-notifications
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard implementation guidelines for mobile notifications using well-known packages.
- [EXTERNAL_DOWNLOADS]: The skill uses firebase_messaging and flutter_local_notifications which are standard, versioned packages from the official Flutter package registry.
- [PROMPT_INJECTION]: The skill documents patterns for handling external notification payloads, which represents an attack surface for indirect prompt injection. Ingestion points: RemoteMessage data enters the app via FirebaseMessaging streams in references/implementation.md. Boundary markers: The skill explicitly mandates that developers validate all JSON data before navigating on click in SKILL.md. Capability inventory: The skill facilitates UI navigation based on payloads but does not expose access to file system writes or shell command execution. Sanitization: The instructions require strict JSON validation of message data before it is used for navigation.
Audit Metadata