flutter-package-development
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis of external project assets such as configuration files and source code, which represents a standard surface for indirect instructions.
- Ingestion points: Analysis of
pubspec.yaml,README.md, and package source code (SKILL.md). - Boundary markers: The instructions do not specify explicit delimiters for project content, but emphasize thorough manual inspection.
- Capability inventory: Invokes standard development utilities including
dart analyze,flutter test, anddart pub publish --dry-run(SKILL.md). - Sanitization: Risk is addressed through instructions to verify tool outputs and explicitly scan for credentials or secrets before any distribution activity (references/publication-readiness.md).
Audit Metadata