llamaindex
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a utility script
scripts/check-updates.pythat performs a network request to the official Python Package Index (PyPI) athttps://pypi.org/pypi/llama-index/json. This is used to check for newer versions of the tracked LlamaIndex framework. - [COMMAND_EXECUTION]: The documentation contains standard installation instructions using
pip installfor the framework and its various integration packages (e.g.,llama-index,llama-index-llms-openai). - [DATA_EXPOSURE_AND_EXFILTRATION]: Code examples in the reference files demonstrate how to configure LLM providers and vector stores. All sensitive fields such as
api_keyortokenuse standard documentation placeholders (e.g.,sk-...,your-key,llx-...). No hardcoded secrets or sensitive data exfiltration patterns were found. - [SAFE]: The skill is purely instructional, providing documentation for a well-known AI framework. The associated maintenance script uses standard library functions and targets a trusted service for metadata retrieval.
Audit Metadata