developing-genkit-dart
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation recommends installing the Genkit CLI using a shell script from the official vendor domain (
cli.genkit.dev) or through thegenkit-clipackage on the npm registry. - [COMMAND_EXECUTION]: The Model Context Protocol (MCP) integration examples demonstrate how agents can be configured to execute local commands and tools, such as
npx, to interact with the host environment as part of their intended functionality. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for agents to interact with the local file system using the
filesystemmiddleware and MCP servers. This introduces a surface where the agent could ingest and act upon instructions embedded in external files. The provided documentation includes security best practices and guidance on sanitization to mitigate these risks.
Audit Metadata