Évaluation avant installation
dart-best-practices Rapport d’évaluation.
Une décision d’installation lisible par machine pour les Agents : adéquation à la tâche, Trust Score, Audit Score, sécurité d’installation, surface de permissions et plan de validation concret avant de toucher l’espace de travail.
do not auto install
Install path: No install command or repository handoff is available.
Gates requis
Vérifications qu’un Agent doit réussir avant installation
Adéquation à la tâche
84
Task wording matches this skill metadata.
- Evaluate dart-best-practices before installing it in an agent workflow
- automation
- Coding agents workflows; Claude Code teams; builders willing to evaluate younger projects
Chemin d’installation
20
No install command or repository handoff is available.
Sécurité de la commande d’installation
92
Chemin d’installation standard de package ou runtime
Score de confiance
72
Good trust signals with a few areas worth checking before rollout.
- Liste solide
- 144 stars GitHub
- Apache-2.0
Score d’audit
76
Risqué
- Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
Contrôle de sécurité Agent
56
This skill should not be selected by an agent without explicit human security review.
- Do not auto-install. Inspect the source, dependencies, and permission surface first.
- Audit risk exceeds the requested agent policy
Clarté de licence
86
Apache-2.0
- Apache-2.0
Surface de permissions
88
Accès à la base de données
- Network access: medium
- Filesystem access: medium
- Database access: medium
Plan de validation
Ce que l’Agent doit faire ensuite
- 1Inspect repository, README/SKILL.md, license, and recent commits before production use.
- 2Install in an isolated workspace or sandbox with no production secrets available.
- 3Run the smallest representative task and record files touched, commands run, network access, and outputs.
- 4Compare the selected skill against at least one alternative when the eval status is review or failed.
- 5Promote only after the agent reports a successful verification result and unresolved warnings are accepted.
Ne pas utiliser quand
Conditions exigeant une autre skill
- Équipes qui nécessitent un SLA soutenu par le fournisseur
- production agents without a repository review
- The skill is relatively narrow, covering only two best practices (multi-line strings and line length).
- Audit risk risky exceeds max_risk=medium
- Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
- The parsed description in the metadata appears as '|-' due to YAML block scalar handling, but the actual description is clear in the frontmatter.
Vérifications complémentaires
Signaux de confiance derrière la décision
Complétude README/SKILL.md
Validé86
Les métadonnées incluent suffisamment de contexte d’usage et de workflow
Maintenance récente
Validé88
1 mois depuis le dernier push
Alternatives disponibles
Validé82
Alternative skills are available for comparison.