gemini
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the 'gemini-cli' package via the Homebrew package manager, linking to official documentation at ai.google.dev. This is a reference to a well-known service from a trusted organization.
- [COMMAND_EXECUTION]: Provides guidance for executing the 'gemini' binary to process prompts. This is the intended primary function of the skill for text generation and analysis.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. (1) Ingestion point: The skill takes untrusted text as a positional argument for the 'gemini' command. (2) Boundary markers: No explicit delimiters or instructions to ignore embedded commands are included. (3) Capability inventory: Executes the 'gemini' command-line tool. (4) Sanitization: No sanitization or filtering of the input is specified in the skill body.
Audit Metadata