smithery/ngxtm

Flutter Security

Security standards for Flutter applications based on OWASP Mobile.

Installation

$ npx skills add smithery/ngxtm --skill flutter-security

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

Also in this package

Other skills from smithery/ngxtm · top by installs.

npx skills add smithery/ngxtm

Browse all from smithery/ngxtm

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Skill metadata

Parsed from SKILL.md frontmatter.

More metadata
labels
["security","owasp","pii","encryption"]
triggers
{"files":["lib\/infrastructure\/**","pubspec.yaml"],"keywords":["secure_storage","obfuscate","jailbreak","pinning","PII","OWASP"]}

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,168 B
  • docs SUMMARY.md 90 B

History

  1. First recorded snapshot · 0 installs

SKILL.md

Mobile Security

Priority: P0 (CRITICAL)

Standards for basic mobile security and PII protection.

Implementation Guidelines

  • Secure Storage: Use fluttersecurestorage for tokens/PII. Never use shared_preferences.
  • Hardcoding: Never store API keys or secrets in Dart code. Use --dart-define or .env.
  • Obfuscation: Always release with --obfuscate and --split-debug-info.
  • SSL Pinning: For high-security apps, use diocertificatepinning.
  • Root Detection: Use flutterjailbreakdetection for financial/sensitive applications.
  • PII Masking: Mask sensitive data (email, phone) in logs and analytics.

Reference & Examples

For SSL Pinning and Secure Storage implementation details: See [references/REFERENCE.md](references/REFERENCE.md).

Related Topics

layer-based-clean-architecture | performance