flutter-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes basic shell commands using the
Bashtool, specifically employingfindandwcto discover and count Dart source files and test files within the project directory. - [EXTERNAL_DOWNLOADS]: The skill fetches the latest Flutter architecture and testing standards from the author's public GitHub repository (
somnio-software/cursor-rules) using theWebFetchtool to ensure the audit is based on current best practices. - [PROMPT_INJECTION]: The skill analyzes external content (project source code and remote markdown files), creating a potential surface for indirect prompt injection where untrusted data could influence agent behavior.
- Ingestion points: Local
.dartand*_test.dartfiles, and remote.mdcstandards files from GitHub. - Boundary markers: None explicitly implemented to delimit analyzed code from instructions.
- Capability inventory: Tool access is restricted to reading files, basic shell discovery, and fetching remote standards.
- Sanitization: No input validation or sanitization of the code files is performed before they are processed by the agent.
Audit Metadata