flutter-openapi-clientlisted

# Flutter OpenAPI Client Treat OpenAPI specs as untrusted wire contracts. Preserve SDK constraints, HTTP transport, generator, serialization, and architecture unless migration is requested. Installing this skill requires no API keys, accounts, base URLs, or generator packages. ## Preflight Inspect `pubspec.yaml`, lockfile, clients, DTOs, generator setup, auth owners, and committed specs. Identify if input is local JSON/YAML, a spec URL, or Swagger UI. Confirm Swagger 2.0 or OpenAPI 3.x dialect before parsing. ## Load references conditionally - Read [spec discovery and inventory](references/spec-discovery-and-inventory.md) for Swagger UI discovery, resolving `$ref`, trust boundaries, and acquisition ledgers. - Read [schema and client generation](references/schema-and-client-generation.md) for models, operations, serialization, auth hooks, and generated code boundaries. - Read [contract evolution and verification](references/contract-evolution-and-verification.md) for diffs, compatibility classification, and client verification. ## Core workflow 1. **Bounded Acquisition**: Never execute remote JavaScript. Treat user target as read-only. Block non-public network (loopback, metadata, link-local) and out-of-root targets. Revalidate every reference and redirect hop; never forward credentials or cookies across origins. Cap depth, count, size, and time, and emit an acquisition ledger. 2. **Complete Inventory**: Inventory all reachable paths, operations, schemas, security schem