flutter-environment-setup-macos
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes commands requiring administrative privileges to configure system-level tools.
- Evidence:
sudo sh -c 'xcode-select -s /Applications/Xcode.app/Contents/Developer && xcodebuild -runFirstLaunch'andsudo xcodebuild -licensein SKILL.md. - Context: These are standard procedures for initializing the Xcode toolchain. The skill includes a specific constraint prohibiting automatic execution, requiring the user to run these commands manually.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external dependencies via system package managers.
- Evidence:
sudo gem install cocoapodsin SKILL.md. - Context: CocoaPods is an industry-standard dependency manager for Flutter plugins using native Apple code. The skill provides the command for manual user execution.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface by processing external tool output.
- Ingestion points: Analyzes the output of
flutter doctor -v(SKILL.md Step 6). - Boundary markers: Absent; there are no delimiters defining the start/end of the tool's output to prevent the agent from misinterpreting text as instructions.
- Capability inventory: The skill has the capability to recommend and guide the user through system-level command execution and package installation.
- Sanitization: Absent; the logic relies on pattern matching within the diagnostic output to determine necessary environment fixes.
Audit Metadata