developing-genkit-go

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command-Line Interface Installation: The skill provides instructions to download and execute a setup script via curl -sL cli.genkit.dev | bash. While this pattern involves remote script execution, it is the official installation method for the Genkit CLI provided by the vendor.
  • File System Management: The Filesystem middleware provides capabilities for an agent to list, read, and write files within a specified root directory. The implementation uses security features such as os.Root to prevent path traversal and ensure access remains scoped to the intended directory.
  • Command Execution Wrapper: The Genkit CLI includes a start command that wraps local program execution (e.g., go run .) to capture telemetry and traces. This is used for developer observability and debugging during local application development.
  • Data Processing and Injection Surface: The SDK is designed to ingest and process user-provided data for AI generation. It utilizes Handlebars templating and role-based message structures to manage how this data is presented to models, which is a standard approach to mitigating prompt injection risks in agentic workflows.
  • Cross-Origin Resource Sharing (CORS) Guidance: Documentation for deploying agents includes example code for enabling CORS using a wildcard origin (*). This is provided as a reference for local development with browser-based clients and includes clear guidance on sanitization and security boundaries for generative UI components.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 11:05 AM