dhruvanbhalara/flutter-security
skills/flutter/flutter-security/SKILL.md
Enforce architect-level security standards including AES-256-GCM encryption, secure storage, biometric gates, and memory safety. Use when handling sensitive data, credentials, clipboard content, or API communication security.
$ install --global
skillsauthnpx skillsauth add dhruvanbhalara/skills flutter-securityInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 11, 2026, 2:02 AM43.7s1 file scanned
SKILL.md
- name:
- flutter-security
- description:
- Enforce architect-level security standards including AES-256-GCM encryption, secure storage, biometric gates, and memory safety. Use when handling sensitive data, credentials, clipboard content, or API communication security.
- platforms:
- flutter, mobile
- languages:
- dart
- category:
- security
Security & Data Integrity (Architect Level)
- AES-256-GCM: Use Authenticated Encryption for all sensitive storage.
- Secret Storage: Mandatory use of
flutter_secure_storagefor encryption keys and master-derived keys. - Key Derivation: Mandate NIST-approved hashing (Argon2id) for master password derivation before local storage encryption and export.
- Memory Safety: Strictly clear sensitive variables (passwords, keys) from memory when the operation finishes or the app enters the background.
- Clipboard Safety: Mandate programmatic clearing of sensitive data (OTPs, Passwords) after a short duration (30-60s).
- Biometric Gate: Mandatory local authentication for any view, export, or destructive action.
- Audit Log: All security-sensitive actions should be logged via
AppLogger(excluding raw secrets).
Input & API Security
- Input Validation: Validate and sanitize all user-facing input fields before processing or storage.
- HTTPS Only: All API communication MUST use HTTPS. Consider certificate pinning for sensitive applications.
- Token Storage: STRICTLY prohibit storing tokens, API keys, or credentials in source code or public repositories. Use
flutter_secure_storageor environment-based injection.
Related Skills
dhruvanbhalara/flutter-use-http-package
development
VerifiedTrustedCommunity
Perform REST API networking operations (GET, POST, PUT, DELETE) using the lightweight and robust standard `http` package, including platform configurations and background parsing models.
20SKILL.mdUpdated May 28, 2026
dhruvanbhalara/flutter-setup-localization
development
VerifiedTrustedCommunity
Configure internationalization and localization support using Flutter's built-in l10n system, App Resource Bundle (ARB) files, and ICU formatting syntax.
20SKILL.mdUpdated May 28, 2026
dhruvanbhalara/flutter-implement-json-serialization
development
VerifiedTrustedCommunity
Create model classes with fromJson/toJson using dart:convert and Dart 3 pattern matching. Use when manually mapping JSON to classes, parsing HTTP responses, or choosing between manual and code-generated serialization.
20SKILL.mdUpdated May 28, 2026
dhruvanbhalara/flutter-fix-layout-issues
data-ai
VerifiedTrustedCommunity
Diagnose and fix Flutter layout constraint violations (RenderFlex overflow, unbounded height/width, ParentData misuse). Use when encountering layout exceptions, yellow-black overflow stripes, or red error screens.
20SKILL.mdUpdated May 28, 2026