ask-gemini
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command using the
geminiCLI while interpolating user-provided queries directly into the command string. This pattern is vulnerable to command injection if the agent does not properly escape shell metacharacters in the user input. - [PROMPT_INJECTION]: This skill presents an indirect prompt injection surface because it retrieves and processes content from the live web.
- Ingestion points: Data is ingested through the stdout output of the
geminiCLI tool which contains content fetched from various web sources. - Boundary markers: Absent. The instructions do not specify the use of delimiters or provide warnings to the agent to ignore instructions embedded within the search results.
- Capability inventory: The skill has the capability to execute shell commands via the
geminiCLI. - Sanitization: Absent. There are no instructions or mechanisms provided to sanitize or validate the external content before the agent processes it.
Audit Metadata