developing-genkit-dart
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- Remote CLI Installation: The skill references a common installation method for the Genkit CLI involving piping a remote script to a shell (
curl | bash) from a vendor-controlled domain. While standard for many developer tools, this pattern involves executing code fetched from a remote source. - Filesystem and Tool Capabilities: The documentation describes features like the
filesystemmiddleware and Model Context Protocol (MCP) integration, which allow agents to interact with the local environment. These are intended functionalities of the SDK, but they represent a powerful capability that requires careful configuration by developers. - Indirect Prompt Injection Surface: The skill provides guidance on building agents that process user-supplied data and execute tools. This architecture introduces a potential surface for indirect prompt injection, where instructions embedded in processed data could influence the agent's behavior. The documentation includes the use of schemas and middleware which can help mitigate these risks.
Audit Metadata