flutter-subagent-dev

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs subagents to execute standard development commands, specifically flutter analyze and git commit. These operations are limited to the project scope and are used for verification and version control.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests implementation plans from external markdown files (e.g., docs/plans/). While this represents an attack surface for indirect prompt injection, the risk is mitigated by a mandatory two-stage review process (spec compliance and code quality) performed by separate subagent instances, as well as the instruction for reviewers to verify code independently of the implementer's report.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 11:51 AM