download-gemini-images
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill automates image retrieval from the official Google Gemini domain (
gemini.google.com) and its associated image hosting service (lh3.googleusercontent.com). This is consistent with the skill's stated purpose. - [COMMAND_EXECUTION]: The skill executes a local shell script (
scripts/package_images.sh) to bundle downloaded images into a ZIP archive within the user's local Downloads directory. The script uses standard utilities (find,zip,zipinfo) and does not perform any suspicious network or system modifications. - [DATA_EXFILTRATION]: While the skill interacts with a logged-in browser session, it explicitly includes instructions for the agent to avoid inspecting sensitive information such as cookies, local storage, or passwords. Data is kept within the user's local filesystem.
- [SAFE]: The skill includes a metadata file (
.security-scan-passed) claiming safety. Per the analysis framework, this claim is acknowledged but not treated as an authoritative verdict; the SAFE rating is derived independently from the behavior of the scripts and instructions.
Audit Metadata