gemini-api-integration
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official software development kits from Google's public registries, specifically
@google/generative-aifor Node.js environments andgoogle-generativeaifor Python environments. - [CREDENTIALS_UNSAFE]: Promotes secure development practices by instructing users to utilize environment variables for API key management rather than hard-coding sensitive credentials into the source code.
- [COMMAND_EXECUTION]: Includes standard shell commands for package installation and environment variable configuration which are appropriate for the skill's stated purpose of API integration.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing external data such as user-provided text prompts and local image files through the Gemini API. While this represents a standard data ingestion surface for LLM applications, it relies on the model's native safety filters and standard integration patterns.
Audit Metadata