Flutter Release Pipeline

Build and package Flutter Android release artifacts (APK/AAB), collect outputs into a single folder, and produce a short release checklist. Use when the user...

This skill appears to implement a reasonable Flutter release pipeline, but take these precautions before running it: 1) Verify your environment: ensure 'flutter' and PowerShell are installed and at the expected versions (the skill's metadata doesn’t declare these tools). 2) Inspect scripts/flutter_release.ps1 before executing — the SKILL.md references that script but the skill bundle does not include it; running an unreviewed script can execute arbitrary code. 3) Prepare signing credentials (keystore, passwords) and Play Console credentials separately — the skill does not declare how these are provided. 4) Run the pipeline in an isolated environment (CI runner or container) if you’re unsure about the script/source. 5) Ask the publisher to update metadata to list required binaries and any environment variables/credentials the pipeline needs, or to provide the referenced PowerShell script so you can review it.

Type: OpenClaw Skill Name: neo1307-flutter-release-pipeline Version: 1.0.0 The skill defines a workflow for building Flutter Android artifacts but relies on the execution of an external PowerShell script (scripts/flutter_release.ps1) using the '-ExecutionPolicy Bypass' flag. While the stated purpose in SKILL.md is legitimate, the use of shell execution with bypassed security policies is a high-risk capability, and the actual logic within the referenced .ps1 file was not provided for analysis to ensure it lacks malicious intent or data exfiltration logic.