SKILL verified MIT Self-run

Flutter Security

Name: Flutter Security
Availability: InStock
Author: ngxtm

skill-ngxtm-devkit-security · by ngxtm

Security standards for Flutter applications based on OWASP Mobile.

↗ Repository

— No reviews yet

0 installs

16 views

0.0% view→install

Install

$ agentstack add skill-ngxtm-devkit-security

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

✓ Prompt-injection patterns
✓ Secret / credential exfiltration
✓ Dangerous shell & filesystem operations
✓ Untrusted network calls
✓ Known-malicious package signatures

What it can access

✓ Network access No
✓ Filesystem access No
✓ Shell / process execution No
● Environment & secrets Used
✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Flutter Security? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.

About

Mobile Security

Priority: P0 (CRITICAL)

Standards for basic mobile security and PII protection.

Implementation Guidelines

Secure Storage: Use flutter_secure_storage for tokens/PII. Never use shared_preferences.
Hardcoding: Never store API keys or secrets in Dart code. Use --dart-define or .env.
Obfuscation: Always release with --obfuscate and --split-debug-info.
SSL Pinning: For high-security apps, use dio_certificate_pinning.
Root Detection: Use flutter_jailbreak_detection for financial/sensitive applications.
PII Masking: Mask sensitive data (email, phone) in logs and analytics.

Reference & Examples

For SSL Pinning and Secure Storage implementation details: See [references/REFERENCE.md](references/REFERENCE.md).

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Author: ngxtm
Source: ngxtm/devkit
License: MIT

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Write a review

Versions

v0.1.0 Imported from the upstream source.