adk-verify-snippets
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- Dynamic Code Execution from Data: The skill identifies, extracts, and executes Python code blocks from Markdown files. While this is the primary feature of the verifier, it involves the execution of code derived from external data sources using
importlib.utilandexec_module. - Sensitive Credential Management: The execution harness is designed to ingest and utilize
GEMINI_API_KEYorGOOGLE_API_KEYfrom the environment. This allows testing of snippets that interact with AI services but requires ensuring the code being tested does not mishandle these credentials. - Subprocess Execution: The main script,
verify_md.py, utilizessubprocess.runto invoke the isolated execution harness for each snippet. This ensures snippets are run in separate processes but involves standard system-level command execution. - Dynamic Module Loading: The
run.pyharness programmatically loads and runs snippets as modules to capture errors and coverage. This dynamic loading pattern is a standard testing technique but is inherently associated with code execution risks if the input Markdown is untrusted.
Audit Metadata