llamaindex

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes a utility script scripts/check-updates.py that performs a network request to the official Python Package Index (PyPI) at https://pypi.org/pypi/llama-index/json. This is used to check for newer versions of the tracked LlamaIndex framework.
  • [COMMAND_EXECUTION]: The documentation contains standard installation instructions using pip install for the framework and its various integration packages (e.g., llama-index, llama-index-llms-openai).
  • [DATA_EXPOSURE_AND_EXFILTRATION]: Code examples in the reference files demonstrate how to configure LLM providers and vector stores. All sensitive fields such as api_key or token use standard documentation placeholders (e.g., sk-..., your-key, llx-...). No hardcoded secrets or sensitive data exfiltration patterns were found.
  • [SAFE]: The skill is purely instructional, providing documentation for a well-known AI framework. The associated maintenance script uses standard library functions and targets a trusted service for metadata retrieval.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — llamaindex