shadcn-ui-flutter
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines multiple components designed to ingest and process user-provided text.
- Ingestion points: Input components such as ShadInputFormField, ShadTextareaFormField, and ShadSelectFormField (located in components/form.md, components/input.md, and components/textarea.md) serve as entry points for untrusted data.
- Boundary markers: The examples include validator functions to enforce data constraints, though they lack explicit instruction-isolation delimiters.
- Capability inventory: The skill focus is on UI rendering; no high-privilege operations like shell execution or file system modification are associated with the processed data in the provided scripts.
- Sanitization: Examples demonstrate basic length and content validation, but do not showcase comprehensive input sanitization.
- [EXTERNAL_DOWNLOADS]: The skill fetches assets from external development and image hosting services.
- Evidence: Usage examples in components/avatar.md reference requestly.io and githubusercontent.com to demonstrate image loading and placeholder functionality.
Audit Metadata