flutter-handling-http-and-json
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious override or bypass instructions were detected in the skill content or metadata.
- [DATA_EXFILTRATION]: No sensitive data exposure or unauthorized exfiltration patterns were identified. Code examples use a well-known public testing API (jsonplaceholder.typicode.com).
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unsafe script downloads were found. The skill references standard development tools like
build_runnerfor code generation during the development phase. - [OBFUSCATION]: No obfuscated content, hidden characters, or encoded URLs were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for fetching and parsing data from external APIs. This constitutes an ingestion point for untrusted data.
- Ingestion points: Network responses in
fetchAlbum,createAlbum, andfetchPhotoswithinSKILL.md. - Boundary markers: The skill recommends using strict JSON schemas for AI integrations to ensure reliability.
- Capability inventory: HTTP networking and JSON parsing.
- Sanitization: Employs standard
jsonDecodeand type-safe model mapping. The inherent risk of processing external data is consistent with the skill's primary purpose and is mitigated by the recommended use of structured data and schemas.
Audit Metadata