veo
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches an installation script for the gemini-api CLI from a repository managed by a well-known, trusted organization.
- Source URL: https://raw.githubusercontent.com/google-gemini/gemini-api-cli/main/scripts/install.sh
- [REMOTE_CODE_EXECUTION]: The installation process for the CLI tool involves piping a remote script directly into a shell interpreter (bash or PowerShell).
- Evidence: Found in SKILL.md for both Linux/macOS and Windows environments.
- [COMMAND_EXECUTION]: The skill utilizes command-line tools such as gemini-api and gcloud for legitimate tasks including authentication, file management, and triggering video generation operations.
- [SAFE]: All identified external dependencies and remote resources originate from established and trusted sources. The skill also explicitly guides users toward secure practices for managing API keys and access tokens rather than hardcoding them.
Recommendations
- INFO: Downloads code from trusted source(s): https://raw.githubusercontent.com/google-gemini/gemini-api-cli/main/scripts/install.sh
Audit Metadata