skills/google/skills/gemini-api/Gen Agent Trust Hub

gemini-api

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • Model-Driven Code Execution: The skill demonstrates the use of the code_execution tool, which allows the Gemini model to generate and execute Python code within a secure environment. This is a standard capability of the Gemini API used for improving reasoning accuracy and data processing.
  • External Data Ingestion: Features such as Google Search grounding and the URL context tool enable the model to retrieve and process information from the web. This introduces a surface for indirect prompt injection, where content from external sites could potentially contain instructions aimed at influencing the model's response. The use of these features is a standard practice for grounding AI responses in real-world data.
  • External Package Execution (MCP): The documentation includes an experimental example of running a Model Context Protocol (MCP) server using the npx command. This pattern involves executing third-party code from a package registry, so developers are encouraged to verify the integrity of external MCP servers used in their specific environments.
  • Agent Directional Instructions: The skill contains instructions designed to update the agent's internal knowledge regarding model versioning, such as advising that previous knowledge of legacy models is outdated. This is an instructional technique to ensure the agent provides the most relevant and up-to-date information based on the current API documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 03:20 PM