redis
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONINGCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents methods for ingesting data from an external Redis database.
- Ingestion points: Data is retrieved using
r.get(),r.hgetall(),r.lrange(), andr.json().get()as shown inSKILL.md. - Boundary markers: No specific delimiters or warnings against embedded instructions are provided in the code examples.
- Capability inventory: The documentation shows standard data operations but does not involve dynamic execution (e.g., eval or exec) of the retrieved data.
- Sanitization: The provided snippets do not include data validation or sanitization routines.
- [METADATA_POISONING]: The skill refers to 'Redis v8.0' and 'redis-py v8.0', which are future or non-existent stable versions compared to the current environment. This could cause confusion or lead to potential supply chain issues if users attempt to pin dependencies to these strings.
- [COMMAND_EXECUTION]: Documentation includes examples of potentially destructive administrative commands.
- Evidence: The skill lists
FLUSHDBand aSCANpattern for bulk deletion inSKILL.md, though these are paired with cautionary notes. - [EXTERNAL_DOWNLOADS]: The skill provides installation commands for legitimate and well-known Python packages.
- Evidence: Mentions
pip install redisandpip install django-redisinSKILL.md.
Audit Metadata