flutter-test-android-visually
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill follows established development practices for Flutter and Android automation, using official tools for deployment and log retrieval.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. 1. Ingestion points: Figma design URLs and project files (e.g., build.gradle, .env, README.md) as described in SKILL.md and references/flutter.md. 2. Boundary markers: Absent; no explicit delimiters or warnings are defined for external data. 3. Capability inventory: Device interaction via ADB shell commands and app management via the Flutter CLI. 4. Sanitization: Absent; external data is used for command generation and UI comparison. This risk is inherent to the testing use case.
- [EXTERNAL_DOWNLOADS]: The skill mentions 'flutter pub get' to fetch dependencies from pub.dev, which is a well-known and trusted service within the ecosystem.
Audit Metadata