flutter-retrofit-networking
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes the string 'Priority: P0 (CRITICAL)' in the main header of SKILL.md. This is a known prompt injection pattern designed to trick models into treating instructions with higher priority or overriding established safety constraints.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external REST APIs, creating a surface for indirect prompt injection.
- Ingestion points: External data enters the application context through Retrofit abstract classes defined in references/implementation.md and references/REFERENCE.md.
- Boundary markers: The skill implements boundary markers by using @JsonKey(unknownEnumValue: ...) to handle unexpected enum values from the API, as shown in references/REFERENCE.md.
- Capability inventory: The skill facilitates network operations (GET/POST requests) and persistent storage operations via SecureStorage in references/token-refresh.md.
- Sanitization: The implementation workflow in SKILL.md mandates mapping DTOs to Domain Entities, which acts as a sanitization layer between the external data layer and the internal application logic.
Audit Metadata