100Critical
This skill downloads and executes remote code, misrepresenting itself
Behavior Analysis
Mismatch detected — The skill's description claims it 'Generates code', but the actual content only provides documentation and instructions for a user to utilize the Genkit Dart SDK and CLI, which can then be used for code generation. The skill itself does not perform code generation.
Claims to do
Genkit Dart: Genkit Dart is an AI SDK for Dart that provides a unified interface for code generation, structured outputs, tools, flows, and AI agents.
Actually does
The skill provides instructions for installing the Genkit CLI via `curl -sL cli.genkit.dev | bash` or `npm install -g genkit-cli`, and for running Dart applications with `genkit start -- dart run main.dart`. It also references various internal documentation files (`references/*.md`) for core Genkit Dart features, plugins, and external dependencies, and suggests using `dart analyze`.
Skill Info
Namefirebase/agent-skills/developing-genkit-dart
Registrygithub
Versionbfd90c4c5ec5
PURLpkg:github/firebase/agent-skills@bfd90c4c5ec5#developing-genkit-dart
Stars224
Installs455,628
Source
SHA-2569b2b3c47b0fb...
SHA-15e19dc66e5aa...
MD5ebfaf7d812d8...
TLSH4a7181035473...
Size3,757 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
https://github.com/firebase/agent-skills/tree/main/skills/developing-genkit-dart455,628 installs
Claude CodeDocs
/plugin marketplace add firebase/agent-skills/plugin install developing-genkit-dart@firebase/agent-skills
Gemini CLIDocs
gemini extensions install https://github.com/firebase/agent-skills.git --consent
CursorDocs
Skills.shDocs
npx skills add https://github.com/firebase/agent-skills --skill developing-genkit-dartAssessments (2)
AI Agent Traps ↗Remote code download and execution detectedcriticalcommand execution
Remote code download and execution detected
100% confidenceline 24
curl -sL cli.genkit.dev | bash
Description Mismatchmediumdescription mismatch
The skill's description claims it 'Generates code', but the actual content only provides documentation and instructions for a user to utilize the Genkit Dart SDK and CLI, which can then be used for code generation. The skill itself does not perform code generation.
85% confidence
The content is purely informational, providing commands for installation and usage, and links to documentation. There are no mechanisms within the skill itself to generate code.
Version History (2)
Dependencies (1)
firebase.claude-plugin/marketplace.jsonnot scanned
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/firebase/agent-skills/developing-genkit-dart)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/firebase/agent-skills/developing-genkit-dart"><img src="https://mondoo.com/ai-agent-security/api/badge/github/firebase/agent-skills/developing-genkit-dart.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/firebase/agent-skills/developing-genkit-dart.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow