hybrid-search-implementation
Warn
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
PostgresHybridSearchclass inresources/implementation-playbook.mdcontains a SQL injection vulnerability. Thehybrid_searchmethod iterates overfilter_metadataand interpolates keys directly into the SQL string:where_clause += f" AND metadata->>'{key}' = ${len(params)}". An attacker providing malicious metadata keys could bypass filters or access unauthorized data.\n- [SAFE]: The skill manages dependencies on established libraries such asasyncpg,numpy,elasticsearch, andsentence-transformers. These are well-known packages for database connectivity and natural language processing.\n- [SAFE]: The skill presents an indirect prompt injection surface by design as it is intended to build search pipelines. \n - Ingestion points: User queries and retrieved document content processed in
resources/implementation-playbook.md. \n - Boundary markers: None implemented in the provided search templates. \n
- Capability inventory: Database read operations via SQL and Elasticsearch queries. \n
- Sanitization: Parameterized values are used for query content, but keys in metadata filters are unsanitized.
Audit Metadata