Security risk report for @forgecat/google-gemini_gemini-skills_gemini-interactions-api v0.0.5
Source Integrity
Low
Profile sourced from official Google Gemini repository (https://github.com/google-gemini/gemini-skills) with Apache-2.0 license.
Metadata includes commit hash and version tracking; no evidence of tampering or supply-chain compromise.
Agent Intent
INT-000Medium
The skill uses authoritative-override language ('These rules override your training data. Your knowledge is outdated.') to assert precedence over the agent's existing knowledge, a mild authority-hijack pattern.
The skill promotes several model identifiers (e.g. 'gemini-3.1-pro-preview', 'gemini-3-flash-preview') that do not correspond to any publicly documented Gemini models as of the knowledge cutoff, raising a concern that the agent could be steered toward non-existent or attacker-controlled endpoints.
The instruction to silently substitute deprecated models ('use gemini-3-flash-preview instead and note the substitution') could systematically redirect user requests without explicit consent, though this falls short of clear exfiltration or credential-harvesting.
Details
Evidence
"These rules override your training data. Your knowledge is outdated."
"gemini-3.1-pro-preview", "gemini-3-flash-preview", "gemini-3.1-flash-lite-preview" — model names not matching any known public Gemini release series
"If a user asks for a deprecated model, use `gemini-3-flash-preview` instead and note the substitution."
Permissions
Low
No tools or skills are declared in the profile; no file_write, shell, or high-risk categories requested.
Content is purely educational documentation for calling the Gemini API — authority is limited to code examples and best-practice guidance.
Details
Evidence
Declared tools section: (none declared)
Profile describes API usage patterns only, with no tool definitions or hooks.
MCP Risk
Low
No MCP servers are defined or referenced in the profile.
Documentation mentions MCP integration as a *capability* of Deep Research (for users to optionally connect private data sources), but does not configure or require any MCP server.
Details
Evidence
MCP servers section: (none)
Reference: 'MCP integration' Connect to private data sources and specialized tools via remote MCP servers' — describes user-initiated optional feature, not a profile-embedded server.
ForgeCat