gemini-image
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
google-generativeaipackage via pip, which is the official library provided by Google for interacting with their generative AI models. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external visual data such as screenshots, UI designs, and diagrams. This represents a surface for indirect prompt injection, where an image could contain hidden instructions or malicious text intended to influence the AI's output. The risk is considered inherent to the vision analysis task and mitigated by the lack of dangerous capabilities granted to the skill.
Audit Metadata