matcher-to-checks
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION] (LOW): The skill possesses an indirect prompt injection surface. 1. Ingestion points: Test files in the
test/directory. 2. Boundary markers: None identified. 3. Capability inventory: File modification (test files, pubspec.yaml) and command execution (dart pub add). 4. Sanitization: None. Risk is mitigated by the constrained scope of modifications. - [COMMAND_EXECUTION] (LOW): Uses
grepanddart pubfor discovery and dependency management. These are standard tools for Dart development. - [EXTERNAL_DOWNLOADS] (LOW): Executes
dart pub add --dev checks, which downloads from the trustedpub.devregistry. [TRUST-SCOPE-RULE] applies.
Audit Metadata