mobile-flutter-navigation
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
flutter pub add go_routerto install the required dependency. - [EXTERNAL_DOWNLOADS]: The skill fetches the
go_routerpackage from the official Dart package registry (pub.dev). - [INDIRECT_PROMPT_INJECTION]: The skill incorporates user-provided inputs into the application configuration, representing a potential surface for injection.
- Ingestion points: The skill takes input for 'Navigation type', 'Auth-gated routes', and 'Deep link scheme' in SKILL.md.
- Boundary markers: No explicit delimiters are specified to isolate user-provided data from generated code or configuration.
- Capability inventory: The skill performs shell command execution and writes configuration data to multiple project files in the
lib/,ios/, andandroid/directories. - Sanitization: The skill does not provide mechanisms for validating or escaping user-supplied configuration strings before they are interpolated into the project's source code or platform-specific metadata files.
Audit Metadata