developing-genkit-dart
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation in
SKILL.mdincludes an installation command for the Genkit CLI that downloads a script fromcli.genkit.devand pipes it tobash. As this is the official domain for the framework, it is considered a legitimate installation method. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the
genkit-cliandgenkitpackages vianpm, and the execution of MCP servers usingnpx. These are standard package management operations for the documented technology stack. - [COMMAND_EXECUTION]: Documentation for the
FilesystemPluginand MCP integration describes tools that can perform sensitive actions such as file manipulation and executing external processes. These are documented features intended for development and agentic workflows.
Audit Metadata