The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources and uses it to perform file modifications and command execution, creating a potential vector for indirect prompt injection.
Ingestion points: The skill fetches version pairing information from https://docs.flutter.dev/install/archive and accepts version strings via user arguments.
Boundary markers: No explicit delimiters or sanitization steps are defined for the fetched external content.
Capability inventory: The skill has permissions to write to project files (pubspec.yaml, GitHub workflows) and execute shell commands (flutter pub get, flutter analyze).
Sanitization: The instructions do not specify validation logic for the external data.
[COMMAND_EXECUTION]: The skill executes shell commands using the Bash tool to verify project state.
Evidence: The skill instructs the agent to run flutter pub get, flutter analyze, and git diff during the upgrade and verification process.
[EXTERNAL_DOWNLOADS]: The skill references external resources for configuration and data.
Evidence: Fetches Dart/Flutter version pairings from the official Flutter documentation (https://docs.flutter.dev/install/archive).
Evidence: Utilizes reusable CI workflows from the vendor's GitHub repository (VeryGoodOpenSource/very_good_workflows).

dart-flutter-sdk-upgrade