algolia-cli
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were identified during the analysis.
- [COMMAND_EXECUTION]: The skill uses the official
algoliaCLI to perform administrative tasks such as record migration, index management, and API key configuration. These operations are well-documented and follow the intended purpose of the skill. - [EXTERNAL_DOWNLOADS]: Installation instructions in
references/getting-started.mdpoint to official Algolia domains (algolia.com,algolia.github.io). These resources are recognized as trusted vendor infrastructure. - [PRIVILEGE_ESCALATION]: Standard use of
sudois documented for installing the CLI via system package managers (apt,yum). This is expected behavior for developer tools requiring system-level installation. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Algolia indices (records, rules, synonyms). While this ingestion surface exists, the skill operates on structured machine-readable formats (JSON, ndjson), and the risk factor is consistent with standard database management tools.
Audit Metadata