jarvus-flutter

SUSPICIOUS. The skill is largely coherent as a Flutter development guide, but it carries medium risk from community-plugin setup via asdf short-name resolution, unpinned latest tool installs, and especially transitive installation of additional agent skills through npx. No clear credential theft or malicious exfiltration is evident.