flutter-testing

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard Flutter testing practices including the AAA (Arrange, Act, Assert) pattern, Robot pattern for UI abstraction, and shared mock management.
  • [DATA_EXPOSURE]: The documentation provides a pattern for handling test credentials (TEST_EMAIL, TEST_PASSWORD) using String.fromEnvironment and the --dart-define flag. This is a recommended security practice for CI/CD and local development to avoid hardcoding secrets in source code.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest local Dart files (tests, robots, keys) to assist in generating or refactoring test code. While this represents a data ingestion surface, the risk is consistent with standard AI-assisted coding tasks and is managed by the agent's execution environment. The instructions include specific boundaries for test placement and naming which provide structure to the generated output.
  • [COMMAND_EXECUTION]: The skill references standard development commands such as flutter test and patrol test. These are legitimate tools for the intended purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 05:18 AM
Security Audit — agent-trust-hub — flutter-testing