gemini
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill initiates the installation of the gemini-cli formula using the Homebrew package manager. This is a standard installation method for CLI tools and targets a well-known service.
- [COMMAND_EXECUTION]: The skill facilitates the execution of the gemini command-line tool. This is the primary intended behavior for interacting with the AI model via the CLI.
- [PROMPT_INJECTION]: The skill acts as an interface that passes user-provided prompts directly to the Gemini CLI, creating a surface for indirect prompt injection.
- Ingestion points: User positional prompt argument in the gemini command line.
- Boundary markers: Absent.
- Capability inventory: Subprocess execution of the gemini binary for AI generation and management tasks.
- Sanitization: No explicit sanitization or escaping of user input is documented within the skill instructions.
Audit Metadata