search-python

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the official couchbase Python package (version 4.0 or higher) for database interaction. As the skill is authored by Couchbase, this is a standard and expected vendor-provided library.
  • [DATA_EXPOSURE]: The skill demonstrates database search operations using index names like hotel-fts and product-vector. It does not contain hardcoded credentials, API keys, or access to sensitive local environment files.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided input for search queries (e.g., text for MatchQuery or strings for embedding). While this is an entry point for untrusted data, the code uses structured SDK objects rather than raw string concatenation, which is a recommended practice to prevent injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 09:28 AM
Security Audit — agent-trust-hub — search-python