flutter-notifications
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly instructing the agent to redact sensitive information (secrets, health data, payment info) from notification payloads and logs. It also requires validation of notification taps as untrusted external input before processing.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and configuration guides from trusted organizations, including Google (Firebase and Android developer documentation) and Apple (Developer documentation), to assist in the implementation of notification features.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for handling external data such as notification payloads and project manifests. It incorporates security controls for this attack surface by mandating that the agent treat such data as untrusted and requiring validation against a versioned allowlist intent.
- Ingestion points: Project configuration files (
pubspec.yaml, manifests) and notification payloads. - Boundary markers: Explicit instructions to treat taps as untrusted and validate destination intents.
- Capability inventory: Instructional guidance for file modification and platform API integration.
- Sanitization: Redaction of sensitive content from logs and telemetry, and validation of external intents.
Audit Metadata