create-flutter-app-native-ui
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides documented architectural guidance and code templates for cross-platform integration using standard Flutter interop patterns such as Pigeon and JS Interop.
- [COMMAND_EXECUTION]: The repository includes shell scripts in the
resources/directory (check_android.sh,check_ios.sh) designed to validate the build environment. These scripts execute standard platform toolchain commands, includinggradlewandxcodebuild. They do not perform unauthorized network operations, access sensitive credentials, or attempt privilege escalation. - [SAFE]: All platform-specific implementations for iOS (SwiftUI), Android (Jetpack Compose), and Web follow expected development practices for bootstrapping the Flutter engine and managing state via platform channels.
- [SAFE]: No obfuscation, data exfiltration, or unauthorized third-party downloads were detected in the source code or instructions.
- [SAFE]: The web implementation in
examples/web/app.jsusesinnerHTMLfor rendering task titles, which is a common simplification in developer examples; while it lacks sanitization for user-provided strings in the resulting UI, this represents a minor best-practice observation rather than a security threat to the AI agent or host system.
Audit Metadata