flutter-planning
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of user-provided feature requirements and designs to generate code implementation plans, creating a standard surface for indirect prompt injection.
- Ingestion points: User-supplied feature designs and requirements serve as the primary input for the plan generation process.
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the user-provided requirements when producing the final plan.
- Capability inventory: The skill's workflow involves writing markdown documents to the 'docs/plans/' directory and invoking other internal tools (flutter-craft:flutter-executing and flutter-craft:flutter-subagent-dev).
- Sanitization: There are no documented procedures for sanitizing or validating user input before it is interpolated into implementation plans.
Audit Metadata