Skills/skills.sh/google-agents-cli-adk-code

google-agents-cli-adk-code@r1

CAUTION

Publisher claims: "This skill should be used when the user wants to "write agent code", "build an agent with ADK", "add a tool", "create a callback", "define an agent", "use state management" — in a project that needs ADK (Agent Development Kit) API patterns and code examples. It provides a quick reference for agent types, tool definitions, orchestration patterns, callbacks, state management, the graph Workflow API, and reference recipes to study. Do NOT use for scaffolding (use google-agents-cli-scaffold) or deployment (use google-agents-cli-deploy). " Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher google · joined 2 days agoInstalls 510KLast detonated 33 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Pipe-to-shell patternSKILL.md:65 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Access to sensitive file pathsreferences/adk-python.md:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Fake instruction boundary tagreferences/adk-python-live.md:623 · Fake instruction boundary tag

AST01

HIGH

npx invocation of non-well-known packagereferences/adk-python.md:514 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsreferences/adk-python-live.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/adk-python.md:301 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/adk-go.md:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Agent configured for autonomous execution without human approvalreferences/adk-python.md:251 · Agent configured for autonomous execution without human approval

AST02

HIGH

Outbound HTTP to raw IP addressreferences/adk-python-live.md:142 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Access to sensitive file pathsreferences/adk-python-live.md:260 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressreferences/adk-python-live.md:142 · URL using raw IP address — may bypass domain-based filtering

AST07