pinecone
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install
pinecone-client,sentence-transformers, andopenaifrom the official Python Package Index (PyPI). These are standard, reputable libraries for building RAG applications. - [SAFE]: The skill handles API keys safely by using a placeholder (
your-api-key) and suggesting the use of environment variables (os.environ["PINECONE_API_KEY"]). - [SAFE]: The code examples demonstrate standard usage of the Pinecone API for index management, data upsertion, and querying. There are no attempts at command execution, file system access, or network exfiltration to untrusted domains.
- [SAFE]: While the skill involves processing external text data (documents and queries), which is an inherent surface for indirect prompt injection, it does not possess dangerous capabilities (like shell execution or file writes) that could be exploited through such an injection. It focuses purely on vector database operations.
Audit Metadata