developing-genkit-go
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command-Line Interface Installation: The skill provides instructions to download and execute a setup script via
curl -sL cli.genkit.dev | bash. While this pattern involves remote script execution, it is the official installation method for the Genkit CLI provided by the vendor. - File System Management: The
Filesystemmiddleware provides capabilities for an agent to list, read, and write files within a specified root directory. The implementation uses security features such asos.Rootto prevent path traversal and ensure access remains scoped to the intended directory. - Command Execution Wrapper: The Genkit CLI includes a
startcommand that wraps local program execution (e.g.,go run .) to capture telemetry and traces. This is used for developer observability and debugging during local application development. - Data Processing and Injection Surface: The SDK is designed to ingest and process user-provided data for AI generation. It utilizes Handlebars templating and role-based message structures to manage how this data is presented to models, which is a standard approach to mitigating prompt injection risks in agentic workflows.
- Cross-Origin Resource Sharing (CORS) Guidance: Documentation for deploying agents includes example code for enabling CORS using a wildcard origin (
*). This is provided as a reference for local development with browser-based clients and includes clear guidance on sanitization and security boundaries for generative UI components.
Audit Metadata