flutter-fullstack-init
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates the
flutter_secure_storagepackage for managing API keys through a 'Bring Your Own Key' (BYOK) architecture, ensuring that sensitive credentials are not hardcoded and are stored securely on the device. - [SAFE]: Workflow instructions utilize official, trusted tools such as the Firebase CLI and Flutterfire CLI for project configuration and management.
- [SAFE]: The skill relies on standard packages from the official Dart package registry (
pub.dev) and correctly uses official Google test IDs for AdMob during development to prevent the misuse of production ad units. - [SAFE]: Architecture guidance includes critical safety and compliance steps, such as implementing appropriate legal links for subscription pages to satisfy platform-specific store guidelines.
Audit Metadata