flutter-device-testing
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard development tools including the Flutter CLI, Android Debug Bridge (adb), and iOS Simctl (xcrun simctl) to manage device state and execute integration tests. These are standard operations for the intended use case.\n- [DYNAMIC_EXECUTION]: The provided script
scripts/run_lifecycle_matrix.pyexecutes test commands defined in a JSON configuration. It employssubprocess.runwithshell=False, passing arguments as a list to prevent shell-based command injection vulnerabilities.\n- [CREDENTIALS_UNSAFE]: The skill demonstrates high security awareness by explicitly instructing developers to avoid placing credentials in command arguments or test matrices. It recommends using existing environment variables or dedicated secret stores for sensitive data.\n- [SAFE]: The execution script includes built-in log redaction logic (SECRET_PATTERNS) to identify and mask common authorization tokens (e.g., Bearer tokens, access tokens) in the generated test reports, reducing the risk of accidental credential exposure.
Audit Metadata