constructive-search
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for Retrieval-Augmented Generation (RAG) where retrieved database content is directly interpolated into prompts for Large Language Models.
- Ingestion points: Search result content from entities such as
documents,contacts, andnotesas processed inreferences/search-rag.md. - Boundary markers: Simple instructional delimiters (e.g.,
Context:) are present inreferences/search-rag.md, but these provide minimal protection against malicious instructions embedded in the retrieved data. - Capability inventory: The skill enables broad database read operations and integrates with LLM interaction tools via
agentic-kitas seen inreferences/search-rag.md. - Sanitization: No explicit sanitization, filtering, or validation of the retrieved content is shown before prompt interpolation.
- [EXTERNAL_DOWNLOADS]: The skill references the vendor's official code repository for related skill configurations.
- Evidence: A link to
https://github.com/constructive-io/constructive/tree/main/.agents/skills/pgpmis provided inreferences/search-postgis.md. This targets the author's own official resource.
Audit Metadata