google-adk-python
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
google-adklibrary from its official repository on GitHub. These downloads originate from a well-known organization's infrastructure. - [DYNAMIC_EXECUTION]: The toolkit includes a
code_executiontool that allows agents to perform computational tasks. This is a primary feature of the framework designed for building autonomous agents. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by enabling agents to ingest data from external sources via tools like Google Search. The documentation recommends best practices such as
tool_confirmationflows to mitigate risks from processing untrusted content. - Ingestion points: Data enters the agent context through the
google_searchtool output described inSKILL.md. - Boundary markers: The skill suggests using
tool_confirmation=Trueto require human approval before sensitive tool execution. - Capability inventory: The framework supports
code_executionand deployment to cloud environments. - Sanitization: Standard LLM safety guardrails are assumed; specific data sanitization logic is not detailed in the provided code snippets.
- [COMMAND_EXECUTION]: The skill includes standard commands for containerizing applications and deploying them to Google Cloud services using
dockerand thegcloudCLI.
Audit Metadata