gemini-image
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructional material and code samples for integrating with Google Gemini's image generation capabilities using the official
google-genaiSDK from a well-known service. - [SAFE]: Recommended security practices are followed by advising users to store API keys in environment variables rather than hardcoding them in scripts.
- [SAFE]: All library dependencies referenced, such as
google-genaiandpillow, are standard, reputable libraries for AI interaction and image processing. - [PROMPT_INJECTION]: The provided code patterns demonstrate how to process untrusted user data (text prompts and reference images), which represents a surface for indirect prompt injection.
- Ingestion points: Python functions in
references/python.mdacceptpromptandreference_image_pathparameters. - Boundary markers: Boundary markers or explicit 'ignore embedded instructions' warnings are absent from the example code snippets.
- Capability inventory: The documented patterns include network access via the SDK and file system write access for saving generated results.
- Sanitization: Input validation and content escaping are not demonstrated in the reference implementation.
Audit Metadata