Skills developing-genkit-dart

📦

developing-genkit-dart

Name: developing-genkit-dart
Author: firebase

Content revision r1 Critical 🔑 Env variables🌐 Network access⚙️ External commands

Build Genkit Dart AI Apps

Dart teams need current patterns for adding generative AI to applications. This skill guides Genkit flows, tools, providers, streaming, MCP, and typed schemas.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "developing-genkit-dart" from https://skillstore.io/skills/firebase-developing-genkit-dart.md and its manifest at https://skillstore.io/api/skills/firebase-developing-genkit-dart/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/firebase-developing-genkit-dart.md Signed manifest GET /api/skills/firebase-developing-genkit-dart/manifest Signed lockfile GET /api/skills/firebase-developing-genkit-dart/lockfile

Test it

Using "developing-genkit-dart". Create a Genkit Dart flow for summarizing customer feedback.

Expected outcome:

A structured implementation plan with required packages, schema design, flow behavior, model selection, and testing steps.

Using "developing-genkit-dart". Connect my Dart app to an OpenAI-compatible provider.

Expected outcome:

Provider setup guidance that explains environment variables, base URL configuration, model registration, and safe credential handling.

Using "developing-genkit-dart". Add tool approval to an agent that can read files.

Expected outcome:

A security-focused design that limits the workspace, lists approved tools, and describes the user approval flow.

Security Audit

Critical

v4 • 7/5/2026 Open versioned report

Most static findings are documentation false positives caused by Markdown code spans, Dart example entry points, localhost URLs, and environment-based provider configuration. One critical issue is confirmed: SKILL.md recommends piping a downloaded Genkit CLI installer directly into bash, and the surrounding install block also deserves review.

Files scanned

1,078

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Critical

SKILL.md:24

Pipe to shell pattern

curl -sL cli.genkit.dev | bash # Native CLI

The instruction pipes a script downloaded from cli.genkit.dev directly into bash. This can execute unverified remote code if copied by a user or agent.

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:23-27

Ruby/shell backtick execution

```bash

This fenced installation block contains shell commands, including a remote script installation path. Users or agents following it may execute installer code from the network.

Detected Patterns

Pipe to shell pattern

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/firebase-developing-genkit-dart/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/firebase-developing-genkit-dart/security.svg)](https://skillstore.io/skills/firebase-developing-genkit-dart?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/firebase-developing-genkit-dart?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/firebase-developing-genkit-dart/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/firebase-developing-genkit-dart.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

firebase. (2026). developing-genkit-dart security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/firebase-developing-genkit-dart/audits/4

BibTeX citation

@techreport{firebase-firebase-developing-genkit-dart-2026,
  author = {firebase},
  title = {developing-genkit-dart security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/firebase-developing-genkit-dart/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "developing-genkit-dart security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "firebase"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/firebase-developing-genkit-dart/audits/4"
identifiers:
  - type: other
    value: "skillstore:firebase-developing-genkit-dart:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prototype a Genkit Flow

Create a Dart flow that wraps model generation, validates input, and returns typed results.

Add AI to Flutter

Choose a provider plugin and connect a Flutter app to a Genkit-powered AI feature.

Review Agent Tooling

Plan MCP, filesystem middleware, and approval controls before exposing tools to an AI agent.

Try These Prompts

Start a Basic App

Help me create a basic Genkit Dart app that calls a Gemini model and prints a short response.

Define a Flow

Design a Genkit Dart flow for summarizing support tickets with schemantic input and output models.

Add Provider Plugins

Compare the Genkit Dart provider setup for Google AI, Anthropic, and OpenAI-compatible endpoints for my app.

Secure Agent Tools

Plan a Genkit Dart agent that uses filesystem tools with approval gates and a restricted workspace.

Best Practices

Read the relevant provider reference before choosing model names or initialization arguments.
Keep API keys in environment configuration and never print them in generated examples.
Run dart analyze and adapt examples before using them in production.

Avoid

Do not pipe downloaded installer scripts directly into a shell.
Do not expose broad filesystem tools without a restricted root and approval policy.
Do not deploy localhost example URLs without authentication and production routing.