flutter-device-testing

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard development tools including the Flutter CLI, Android Debug Bridge (adb), and iOS Simctl (xcrun simctl) to manage device state and execute integration tests. These are standard operations for the intended use case.\n- [DYNAMIC_EXECUTION]: The provided script scripts/run_lifecycle_matrix.py executes test commands defined in a JSON configuration. It employs subprocess.run with shell=False, passing arguments as a list to prevent shell-based command injection vulnerabilities.\n- [CREDENTIALS_UNSAFE]: The skill demonstrates high security awareness by explicitly instructing developers to avoid placing credentials in command arguments or test matrices. It recommends using existing environment variables or dedicated secret stores for sensitive data.\n- [SAFE]: The execution script includes built-in log redaction logic (SECRET_PATTERNS) to identify and mask common authorization tokens (e.g., Bearer tokens, access tokens) in the generated test reports, reducing the risk of accidental credential exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 07:50 AM