dart-dart-format
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute the
dart format .command through thedart_formatMCP tool to process Dart code files. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting untrusted data.
- Ingestion points: The
rootsarray andpathsstrings in the arguments schema ofSKILL.mdallow the agent to process external directory and file identifiers. - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are present in the prompt templates.
- Capability inventory: The skill has the capability to execute filesystem-related commands via the
dart_formattool. - Sanitization: The schema provides partial sanitization by requiring a
file:URI scheme and stating that paths must be within allowed client roots.
Audit Metadata