Flutter Claude Skills
Three Flutter skills: layered testing guidance, OWASP Mobile Top 10 security checks and mobile toolchain unification.
- 68 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- `mobile-toolchain-unifier` edits Gradle, Java and shell configuration and deletes caches and simulator images.
- Emulator changes go through `adb root`, and Python scanners read the project source.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/flutter-claude-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- `mobile-toolchain-unifier` edits Gradle, Java and shell configuration and deletes caches and simulator images.
- Emulator changes go through `adb root`, and Python scanners read the project source.
This is third-party code. Review the repository files before installing.
What it does
`flutter-tester` guides writing and analyzing Flutter tests: unit, widget and integration, mocking patterns, Riverpod testing, Given-When-Then structure and layer-by-layer strategies from repository to widget. `owasp-mobile-security-checker` audits a Flutter app against the OWASP Mobile Top 10 (2024). Four Python scanners look for hardcoded secrets, outdated dependencies, weak network security and insecure storage, while the remaining items follow a manual workflow. `mobile-toolchain-unifier` aligns Gradle, AGP, Java, NDK and Flutter SDK versions through FVM, verifies builds and reclaims disk space from stale caches and simulators.
Who it is for. Flutter developers writing tests who want a pass over their mobile app for common vulnerabilities.
Good fit when
- A Flutter project with Riverpod needs tests for the repository or provider layer.
- Before release, a mobile app needs a scan for hardcoded secrets and network weaknesses.
- Gradle, AGP and Java versions differ across several Android and Flutter projects.
- Disk is full of old Gradle distributions and iOS simulators.
Not a fit when
- You need a substitute for professional penetration testing.
- The project is web or backend with no Flutter.
- You are not ready to delete caches and system images on your machine.
Example request
Audit this Flutter app against OWASP Mobile Top 10 and show the critical findings.Limitations
The skills target Flutter and mobile development; the author excludes web, backend and any replacement for pentesting. Security scanners need Python 3.7 or newer. `mobile-toolchain-unifier` edits Gradle, Java and shell configuration, deletes caches and simulator images and modifies emulators through `adb root`, so back up first. The skills target Claude Code and use the `SKILL.md` format; test them separately in other agents. Automated scanners cover four of ten OWASP items and the rest stays a manual review. Scanners match common patterns, so false positives and misses are possible.
How to disable. Remove the skill folders from `~/.claude/skills/` or the project `.claude/skills/`. Toolchain changes and deleted caches are not reverted by the skill.
FAQ
How do I install the skills in Claude Code?
Run `npx skills add Harishwarrior/flutter-claude-skills` for all projects or add `--agent claude-code` for the current one. Manually: clone the repository into `~/.claude/skills/`.
Which OWASP items do scanners cover?
M1 (secrets), M2 (dependencies), M5 (network) and M9 (storage) are scanned automatically. The rest follow the manual workflow.
What does avdslim do?
It builds a slimmed Android emulator: removes background apps through `adb root`, keeps Google Play and provides fast boot from a snapshot.
How does `flutter-tester` help with Riverpod?
The skill includes a dedicated Riverpod testing guide covering provider, mock and async patterns.
Can I install the skills for a single project only?
Yes. Copy the folders into the project `.claude/skills/` and the set becomes shared across the team.
Discussion
No questions or reviews yet.
Related
SkillsAn MCP server for end-to-end testing: the agent sees a running Flutter, React Native, Electron or other app and drives it
Fifty testing skills for Claude Code, Codex and Cursor: Playwright, strategy, API, visual and load checks.
The noqa-testing skill teaches an agent to test iOS and Android: read the screen, tap, write cases and run them on a real phone
57 reference files on Playwright tests in TypeScript: the agent pulls the one that fits the task, from locators to CI sharding
Swift Testing Agent Skill
swift-testing-agent-skill
A Swift Testing skill from Antoine van der Lee: the new APIs, migration from XCTest, parameterized tests and flat tests. For Claude Code and other agents
Validates Agent Skills packages: structure, links, token weight and instruction quality, with optional LLM-as-judge scoring
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Repository stars | Main difference |
|---|---|---|---|
| Flutter Claude Skills (this card) | no | 68 | |
| VGV AI Flutter Plugin | no | 180 | a Very Good Ventures plugin with 15 skills on architecture, tests and Bloc; here three skills focus on Riverpod, OWASP and toolchains |
| flutter-improve-design | no | 131 | checks Flutter UI and UX code against a rule catalog; here testing, security and toolchains |
README in short
The repository ships three skills with reference docs: testing patterns, an OWASP Mobile Top 10 guide and Android toolchain compatibility matrices. Install through `npx skills`, cloning or copying into `.claude/skills/`.