flutter-subagent-dev
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs subagents to execute standard development commands, specifically
flutter analyzeandgit commit. These operations are limited to the project scope and are used for verification and version control. - [INDIRECT_PROMPT_INJECTION]: The skill ingests implementation plans from external markdown files (e.g.,
docs/plans/). While this represents an attack surface for indirect prompt injection, the risk is mitigated by a mandatory two-stage review process (spec compliance and code quality) performed by separate subagent instances, as well as the instruction for reviewers to verify code independently of the implementer's report.
Audit Metadata