skeleton is a Flutter UI package. It does not provide network, storage, authentication, or secret-management features.

Primary risks are likely to be layout, color-sampling, or widget-lifecycle bugs rather than traditional backend vulnerabilities.

Do not open a public GitHub issue for a suspected security problem.

Instead:

1. Contact the maintainer privately with a clear description, impact, and reproduction details if available.
2. Or use GitHub Security Advisories: Private advisory draft

• Acknowledgment target: within 2-3 business days.
• Fix timing depends on severity and reproducibility.
• Public disclosure should happen after a fix ships.

• General Flutter security questions
• Issues in third-party dependencies that do not involve this package directly
• Ordinary rendering or usability bugs better suited for the normal issue tracker

• Keep Flutter and package dependencies up to date.
• Review UI behavior that could affect accessibility or unexpected interaction.
• Report suspicious focus, semantics, or asynchronous image-sampling behavior if it could mislead users or assistive technologies.