flutter-dependency-upgrades

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions provide structured guidance for dependency management and toolchain migrations without including any executable code or risky shell commands.
  • [SAFE]: The instructions contain explicit safeguards against unauthorized actions, including credential rotation and artifact publishing, which are delegated to specific security-focused skills.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles project configuration files like pubspec.yaml and pubspec.lock. While these files represent an ingestion surface for untrusted data, the skill mitigates risk by requiring a reproducible sequence involving baseline verification, manual diff inspection of generated code, and automated tests.
  • [SAFE]: All external references point to official and established documentation from the Dart and Flutter teams at dart.dev and flutter.dev.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 06:24 PM
Security Audit — agent-trust-hub — flutter-dependency-upgrades