flutter-review
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of markdown documentation and contains no executable code, scripts, or binary files.
- [SAFE]: The instructions promote security best practices, such as preventing the inclusion of secrets, service-account keys, and private API keys in application bundles or repositories.
- [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized data access was found in the provided files.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external code diffs, which constitutes an ingestion point for untrusted data.
- Ingestion points: Code diffs of Flutter widgets, state owners, and configuration files.
- Boundary markers: No specific delimiters or instructions are used to wrap the input data.
- Capability inventory: The skill possesses no capabilities for executing commands, accessing the network, or writing to the file system; it only generates text-based review findings.
- Sanitization: No sanitization is performed, but the lack of executable capabilities makes this surface safe.
Audit Metadata