Skills
Navigate
skills/thiennc-tesoglobal/flutter-skills/flutter-text-rendering/Gen Agent Trust Hub

flutter-text-rendering

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides utility functions and patterns for handling dynamic text strings (e.g., the preventOrphans helper), which creates an inherent surface for indirect prompt injection where untrusted data could influence UI rendering.
  • Ingestion points: The text parameter in the preventOrphans function and input strings passed to Text, Text.rich, and RichText widgets.
  • Boundary markers: The skill does not specify the use of delimiters or instructions to the agent to ignore instructions embedded within the text data being rendered.
  • Capability inventory: The skill relies on standard Flutter widgets for layout (Text, WidgetSpan) and user interaction (TapGestureRecognizer).
  • Sanitization: No explicit validation or sanitization of the input text is described in the provided implementation examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:50 PM
Security Audit — agent-trust-hub — flutter-text-rendering