NYC

install-flutter-from-git

Warn

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Privilege Escalation] (HIGH): Use of sudo for system configuration (xcode-select, xcodebuild) and global package management (gem install cocoapods, apt-get install). These high-privilege operations are required for the primary purpose but grant the skill significant system control.
  • [Unverifiable Dependencies & Remote Code Execution] (LOW): Clones the Flutter SDK from an external repository and immediately executes it via flutter doctor. While it uses the official repository, this pattern involves remote code execution.
  • [Persistence Mechanisms] (LOW): Modifies shell profile files (~/.zshrc, ~/.bashrc) to persist changes to the system environment PATH.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 05:34 PM