semantic-recall
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
rg(ripgrep) andgrepto perform keyword searches on local files within the workspace. These tools are used appropriately for searching project documentation and do not involve unvalidated shell interpolation. - [INDIRECT_PROMPT_INJECTION]: The skill functions as a retrieval mechanism that fetches content from external Pinecone indexes and local markdown files. This ingestion of external data creates a surface for indirect prompt injection if the retrieved snippets contain malicious instructions intended to influence the calling agent.
- Ingestion points: Local markdown files in the
working-folder/and result metadata from the Pinecone index. - Boundary markers: The skill returns raw text snippets and citations; it does not implement specific delimiters or instruction-ignore warnings in its return format.
- Capability inventory: Accesses files via
Readand executes search commands viaBash(grep/rg). - Sanitization: The skill returns raw content without sanitizing or escaping the retrieved text, delegating processing logic to the calling skill.
Audit Metadata