Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add yendangn/flutter-app-builder --skill flutter-pushgit clone --depth 1 https://github.com/yendangn/flutter-app-builderWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yendangn/flutter-app-builder/flutter-push)<a href="https://agentmods.dev/skills/yendangn/flutter-app-builder/flutter-push"><img src="https://agentmods.dev/badge/skills/yendangn/flutter-app-builder/flutter-push/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yendangn/flutter-app-builder/flutter-push"><img src="https://agentmods.dev/badge/skills/yendangn/flutter-app-builder/flutter-push.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.00629 |
| Opus 5.5 | $0.00026 | $0.00252 |
| Sonnet 5.5 | $0.00013 | $0.00126 |
| Haiku 4.5 | $0.00006 | $0.00063 |
Grade A, and why
flutter-push scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 54 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Flutter Push Notifications
Full reference: template.md
Key rules
- Two interfaces:
PushNotificationService(FCM tokens, remote message handling) andLocalNotificationService(display local notifications). - Never import
firebase_messagingorflutter_local_notificationsoutside their*_impl.dartfiles. PushBootstrapis the orchestration layer — it wires both services together, handles all three notification entry points, and owns subscription lifecycle. Feature code only callsinit()/dispose().- Call
pushBootstrap.init()after authentication (not at app start — permissions may not be granted yet). CallpushBootstrap.dispose()on sign-out. - Background message handler must be a top-level function (FCM requirement).
- Three notification entry points handled by
PushBootstrap.init():- Foreground:
pushService.onForegroundMessage→ show local notification - Backgrounded:
pushService.onMessageOpenedApp→ route viaNotificationHandler - Cold start:
pushService.getInitialMessage()→ route viaNotificationHandler
- Foreground:
- FCM token refresh: listen to
pushBootstrap.onTokenRefreshstream and update the backend. - Android notification channel must be created before showing the first notification (required Android 8+).
- iOS: request notification permission via
PermissionServiceat an appropriate UX moment — not on cold start.
PushBootstrap pattern
// After sign-in (e.g., in AuthCubit):
_pushBootstrap.init().catchError((_) {}); // errors must not break auth flow
// On sign-out:
_pushBootstrap.dispose();
Files
lib/src/core/push/
push_bootstrap.dart ← orchestrator (init/dispose, wires all streams)
push_notification_service.dart ← interface (init, getToken, onForegroundMessage, onMessageOpenedApp, getInitialMessage, onTokenRefresh, requestPermission)
push_notification_service_impl.dart ← only import of firebase_messaging
local_notification_service.dart ← interface (init, show, cancel, cancelAll, onNotificationTapped)
local_notification_service_impl.dart ← only import of flutter_local_notifications
notification_handler.dart ← routes NotificationPayload to GoRouter
notification_payload.dart ← value object (title, body, type)
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 54 lines · 65 tokens per session scan A 07c3c3eaec14
flutter-push is a skill published in the GitHub repository yendangn/flutter-app-builder (6 stars, last pushed 3mo ago), licensed MIT. It adds 65 tokens to every session and 629 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
build-zoom-contact-center-app
Reference skill for Zoom Contact Center. Use after routing to a contact-center workflow when implementing app, web, or native integrations; engagement context and state handling; campaigns; callbacks; or version-drift troubleshooting.
add-signal
Add Signal channel integration via signal-cli device-link. Native adapter — no Chat SDK bridge.
build-zoom-meeting-app
Build or embed a Zoom meeting flow. Use when implementing Meeting SDK joins, web or mobile meeting embeds, meeting lifecycle flows, or when deciding between Meeting SDK and Video SDK.
feature-flag-policy
Cargo feature flags for crates/xberg — ORT-incompatible targets (WASM, Android x8664 emulator), type-only and tract inference companion features, WASM/Android-safe variants, PDF backend, mutually-exclusive ORT variants, platform-conditional deps, aggregate feature sets, and build profiles. Load when adding, wiring, or…
flutter-use-http-package
Use the http package to execute GET, POST, PUT, or DELETE requests. Use when you need to fetch from or send data to a REST API.
at_client_skills-sdk
Use this skill when a developer is building a Dart or Flutter app that depends on atclient or atclientflutter from pub.dev, stores or shares data via the Atsign Protocol, needs onboarding (CRAM new-atsign, atKeys file, keychain, APKAM) or APKAM enrollment, asks how to open, own, stop or switch an AtClient or read its…