google-adk-python

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation guides users to install the google-adk framework from official registries and references the project's source code at github.com/google/adk-python. These links target official repositories from a well-known organization.
  • [COMMAND_EXECUTION]: The skill describes the use of framework-specific CLI tools like adk for local development, testing, and evaluation. It also provides examples for deploying agents using the gcloud CLI tool.
  • [REMOTE_CODE_EXECUTION]: Code examples demonstrate how to initialize Model Context Protocol (MCP) servers by spawning subprocesses (e.g., using npx). The framework also includes a built-in code_execution tool, which is explicitly described as running in a sandboxed environment to mitigate risk.
  • [SAFE]: The skill follows security best practices by recommending the use of environment variables and dedicated secret management services for API keys, rather than hardcoding sensitive credentials in the code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 08:57 PM
Security Audit — agent-trust-hub — google-adk-python