sonamu-vector
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of standard dependencies including
ai,voyageai, and@ai-sdk/openai. The packagesaiand@ai-sdk/openaiare provided by a well-known organization. - [INDIRECT_PROMPT_INJECTION]: The skill describes APIs that ingest external text for embedding, which constitutes an indirect prompt injection surface.
- Ingestion points:
sourceTextandsearchTextarguments described inSKILL.mdandreferences/embeddings.md. - Boundary markers: None documented.
- Capability inventory: The embedding process involves sending data to external APIs (Voyage AI and OpenAI).
- Sanitization: Not explicitly discussed in the usage documentation.
Audit Metadata