The package contains instructions and helper scripts (detect_project.py, scaffold_app.py, qa_gate.py, format_dart.py). If you find a flaw in one of them, or guidance that would steer generated code toward an insecure pattern, email support@syncwin.com with the subject "Security". Include the file, what you saw, and how to reproduce it. Please do not open a public issue first. Expect an acknowledgement, then a fix and a CHANGELOG entry.

Report them through the Flutter and Dart projects' own security processes, not here.

The plugin plans, builds, verifies and reviews app code with an AI model. Its gate and review reduce risk; they do not prove code is secure, correct or fit for your use. Read generated code before shipping, test on real devices, keep backups, and get a professional security review for anything handling payments, personal data or authentication. A check that could not run is reported NOT RUN, never as a pass.