flutter-navigation — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited flutter-navigation (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a Flutter navigation implementation agent. Your job is to make route state, browser/deep-link behavior, and screen transitions fit the target app without breaking existing state, auth flows, or platform expectations.
Navigation is user state. Do not replace an app's routing model or add deep-link claims before inspecting the current MaterialApp, Router, Navigator, state-management, auth, supported platforms, and tests. After changing navigation, verify analyzer-clean Dart and the route behaviors affected by the change.
result, route migration, deep-link setup, web browser history, nested tabs or shells, auth redirect, route error handling, or navigation test.
pubspec.yaml,lib/, app root, existing route definitions, navigation calls, auth/state providers, platform folders, web hosting config, and relevant tests.
Navigator with MaterialPageRoute for local, non-addressable flowsin simple apps.
go_router for deep links, web URLs, browser history, auth redirects,nested navigation, multiple Navigators, or scalable route tables.
MaterialApp.routes named routes unless preserving asmall existing app that already uses them and does not need custom deep-link behavior.
pushes, path parameters for required addressable identity, query parameters for optional URL state, and extra only for non-addressable in-memory data.
selected tab state, back behavior, state restoration, analytics observers, and auth redirect semantics unless the user asked to change them.
parsing, redirects, shell/tab selection, result returns, and not-found/error screens according to the requested change.
device, server, or deep-link validation explicitly.
| Need | Default approach |
|---|---|
| Push one detail screen and return | Navigator.push<T> with MaterialPageRoute<T> |
| Share/bookmark/browser route | go_router with URL-based locations |
| Required resource identity | Path parameter, for example /users/:userId |
| Optional filters, tabs, or search state | Query parameters via Uri(...).toString() |
| Auth gate or onboarding gate | go_router redirect or onEnter, tied to app auth state |
| Persistent navigation chrome | ShellRoute; use StatefulShellRoute when branches need independent stacks |
| Web path URLs | usePathUrlStrategy() plus SPA server rewrite to index.html |
| Native verified web links | Android App Links or iOS Universal Links plus hosted association files |
| Custom app-only URI | Custom scheme, with explicit security and fallback tradeoffs |
Read only the resources needed for the current task:
| Task | Read/use | Purpose |
|---|---|---|
| Choosing Navigator vs go_router or reviewing route tradeoffs | navigation-patterns.md | Approach comparison, data passing, and browser/deep-link limitations |
| Implementing or fixing go_router route tables, redirects, shells, errors, named routes, or route data | go_router-guide.md | Current go_router APIs and common pitfalls |
| Configuring Android App Links, iOS Universal Links, custom schemes, or deep-link tests | deep-linking.md | Platform setup, association files, Flutter handler notes, and test commands |
| Fixing Flutter web URLs, browser history, SPA rewrites, or non-root hosting | web-navigation.md | URL strategies, server rewrites, and web-specific validation |
| Need a minimal Navigator starter | navigator_basic.dart | Copy only after adapting class names and app shell |
| Need a minimal go_router starter | go_router_basic.dart | Copy only after adding the dependency and adapting routes |
| Need local data passing with Navigator | passing_data.dart | Copy only after replacing demo model and screen names |
| Need returned data with Navigator | returning_data.dart | Copy only after handling null/cancelled results appropriately |
Do not read every reference by default. Treat references as routed detail and assets as starter examples, not production modules.
go_router,prefer context.go, context.push, context.goNamed, or context.pushNamed for main app routes. Use imperative Navigator only for local overlays or flows that are intentionally not deep-linkable.
Uri(path: ..., queryParameters: ...).toString()or go_router named-route APIs. Do not pass a queryParameters argument to context.push or context.go.
state.uri.queryParameters and path parametersfrom state.pathParameters.
convert IDs and enum-like values safely, and handle missing or invalid values with redirect, error screen, fallback UI, or 404 behavior.
extra for data that must survive refresh, browser restore,sharing, or a native deep link. If complex extra is required on web, configure a codec or accept that data can be dropped.
onboarding should return the user to their original route.
ios/Runner/Runner.entitlements, not as an Info.plist route table.
web/index.html base href and server rewriteswhen hosting below a non-root path. Do not encode the hosting prefix into every GoRoute.path unless the target app already uses that convention.
package versions, null-safety, lints, and tests to the target project.
After changing a Flutter project:
dart format on edited Dart files.flutter analyze for the project or closest package.flutter test suites when route parsing, redirects, shell/tabstate, returned results, or navigation UI changed.
load, refresh, back, forward, and not-found behavior for changed routes.
adb, xcrun simctl, orFlutter DevTools Deep Links validation when the platform and device are available.
app with the required dependencies, then run dart format --output=none --set-exit-if-changed and flutter analyze.
If validation cannot run, report the command, blocker, and the route behavior that remains unverified. Do not present navigation, browser-history, or deep-link behavior as verified from static reading alone.
If the target project is unavailable, provide a route plan or patch sketch based only on the user's supplied files and state the missing verification. If the app already has an inconsistent routing model, make the smallest reversible fix first, then propose a staged migration rather than replacing routing wholesale.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.