flutter-build-release

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill enforces strong security boundaries regarding sensitive data. The SKILL.md and references/flavor-and-scheme-alignment.md files explicitly instruct users to never commit secrets, keystores, provisioning profiles, or service credentials to source control. It recommends using .gitignore and secure environment variables instead.
  • [SAFE]: The skill correctly identifies the limitations of code obfuscation. In references/obfuscation-and-symbols.md, it warns that obfuscation is not encryption and should not be relied upon to protect hardcoded secrets or strings, as they can still be extracted from binaries.
  • [SAFE]: All external links point to official Flutter documentation (docs.flutter.dev), which are trusted resources for mobile development guidelines.
  • [SAFE]: The instructions for building and signing applications require explicit authorization before any mutation of credentials or publishing to stores, preventing unauthorized or accidental releases.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 07:51 AM
Security Audit — agent-trust-hub — flutter-build-release