flutter-golden-test
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected. The skill is designed to improve the Flutter development workflow by automating boilerplate generation for visual regression testing.
- [DATA_EXPOSURE]: The skill analyzes local project files such as
pubspec.yamland.dartsource files to identify project configurations like fonts and themes. This information is used strictly to populate local test templates and is not exfiltrated or transmitted to external services. - [COMMAND_EXECUTION]: The skill provides instructions for the user to execute standard Flutter toolchain commands, such as
flutter test --update-goldens. It does not perform automatic command execution or shell spawning without user consent. - [EXTERNAL_DOWNLOADS]: No external downloads or remote script executions were found. All templates and knowledge assets are contained within the skill package.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests local source code to generate tests, it follows a structured interactive process. The risk of indirect injection from analyzed code is mitigated by the skill's specific focus on UI component parameters and the requirement for user review of generated code.
Audit Metadata