flutter-native-ui
Fail
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONMETADATA_POISONINGPROMPT_INJECTION
Full Analysis
- [METADATA_POISONING]: The skill provides fabricated information about the Flutter SDK, claiming that version 3.47+ deprecates core libraries (
package:flutter/material.dartandpackage:flutter/cupertino.dart) in favor of standalone packages. This version number is significantly ahead of the current stable release, indicating a deceptive attempt to influence development workflows. - [REMOTE_CODE_EXECUTION]: The skill instructs the agent and user to execute
flutter pub add material_uiandflutter pub add cupertino_ui. These are not official Flutter SDK packages; they are third-party libraries. This pattern effectively tricks the agent into fetching and executing untrusted code from external sources under the guise of an official migration. - [PROMPT_INJECTION]: The skill employs authoritative directives ("Hard rules", "Never set") and specific migration flags (
--code=migrate_design_widgets) to override the agent's internal safety and knowledge base regarding standard Flutter development practices, ensuring compliance with the deceptive package installation instructions.
Recommendations
- AI detected serious security threats
Audit Metadata