How to use
- Copy the installation command and review the source package before installing it in your own agent environment.
- Check the source document for required tools, credentials and supported hosts.
- Describe your input and desired deliverable; review the output against the source material.
npx skills add https://github.com/dhruvanbhalara/skills --skill flutter-securityBefore you start
- Installation does not include a model subscription, API allowance or permission to access your files.
- Repository stars and installation counts describe activity, not an independent quality or security test.
Original skill document
Rendered from the source repository. Headings, examples, code, tables, links, and referenced images are preserved.
Security & Data Integrity (Architect Level)
- AES-256-GCM: Use Authenticated Encryption for all sensitive storage.
- Secret Storage: Mandatory use of
flutter_secure_storagefor encryption keys and master-derived keys. - Key Derivation: Mandate NIST-approved hashing (Argon2id) for master password derivation before local storage encryption and export.
- Memory Safety: Strictly clear sensitive variables (passwords, keys) from memory when the operation finishes or the app enters the background.
- Clipboard Safety: Mandate programmatic clearing of sensitive data (OTPs, Passwords) after a short duration (30-60s).
- Biometric Gate: Mandatory local authentication for any view, export, or destructive action.
- Audit Log: All security-sensitive actions should be logged via
AppLogger(excluding raw secrets).
Input & API Security
- Input Validation: Validate and sanitize all user-facing input fields before processing or storage.
- HTTPS Only: All API communication MUST use HTTPS. Consider certificate pinning for sensitive applications.
- Token Storage: STRICTLY prohibit storing tokens, API keys, or credentials in source code or public repositories. Use
flutter_secure_storageor environment-based injection.
