fr-mvvm-contract
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto invoke standard Flutter, Dart, and FVM command-line tools for scaffolding, code generation, and formatting. This is expected behavior for a development-focused AI agent skill. - [EXTERNAL_DOWNLOADS]: The
scripts/openapi_refs.pyscript includes functionality to download OpenAPI JSON specifications from remote URLs specified in contract files. This utility includes safety checks such as a 10-second timeout and an 8MB file size limit.
Audit Metadata