developing-genkit-go
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- Official Tool Installation: The documentation provides instructions for installing the Genkit CLI using a script from
cli.genkit.dev. This is the established installation path for the official developer tools associated with the SDK. - File System Capabilities: The skill describes the use of
FilesystemandArtifactsmiddleware to enable the agent to interact with local files. These features are documented with explicit security considerations, such as utilizing Go'sos.Rootfor directory-scoped access control. - Plugin and Dependency Management: The documentation references various official plugins (e.g.,
googlegenai,anthropic,ollama) hosted on GitHub. These are standard dependencies for the SDK's intended model provider integrations. - Indirect Prompt Injection Surface: As an AI SDK, the skill defines patterns for processing user-supplied input and external tool outputs. The documentation includes security-relevant features like
ToolApprovalmiddleware to implement human-in-the-loop verification for sensitive actions.
Audit Metadata