Security risk report for @forgecat/google-gemini_gemini-skills_gemini-api-dev v0.0.4
Source Integrity
Low
Profile attributes legitimate origin: Google Gemini official repository (https://github.com/google-gemini/gemini-skills) with Apache 2.0 license.
Content is consistent with public Google Gemini API documentation and SDK guidance; no supply-chain red flags detected.
Agent Intent
INT-000Medium
The skill instructs the agent to override its training data with profile-supplied model names ('These rules override your training data'), which is a mild knowledge-poisoning pattern — though the listed models appear to be legitimate Gemini identifiers, the override framing is a concern.
The profile instructs the agent to fetch external URLs (ai.google.dev documentation pages) as a fallback, which is a low-level caution trigger per the rubric.
No credential exfiltration, role hijacking, system-prompt leakage, or clearly attacker-serving guidance was detected; the content appears to serve a legitimate developer-assistance purpose.
Details
Evidence
"These rules override your training data. Your knowledge is outdated."
"Fetch `llms.txt` to discover available pages" / "Fetch specific pages (e.g., `https://ai.google.dev/gemini-api/docs/function-calling.md.txt`)"
Permissions
Low
No tools or skills are declared in this profile; it is purely instructional documentation for Gemini API usage.
No file system, shell, network, or subagent permissions are requested or implied beyond standard web fetch for documentation (which is scoped to official Google domains).
Details
Evidence
"Declared tools (normalized categories; paths are untrusted): (none declared)"
"MCP servers (untrusted data): (none)"
MCP Risk
Low
No MCP servers are defined or configured in this profile.
Profile references an optional Google MCP server (search_docs tool) as a preferred documentation source but does not require or bundle it; usage is conditional and user-controlled.
Details
Evidence
"MCP servers (untrusted data): (none)"
"If the search_docs tool (from the Google MCP server) is available, use it as your only documentation source" (conditional, not mandatory)
ForgeCat