chroma
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and retrieval of external text data, which creates a surface for indirect prompt injection attacks.
- Ingestion points: The skill ingests untrusted content via the
documentsparameter incollection.add()andcollection.update()withinSKILL.mdandreferences/integration.md. - Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between its system instructions and the retrieved document content.
- Capability inventory: The skill includes file writing via
chromadb.PersistentClientand network operations viachromadb.HttpClient. - Sanitization: No sanitization, filtering, or validation of the stored documents is performed before they are presented to the agent.
- [EXTERNAL_DOWNLOADS]: The skill downloads dependencies and references documentation from well-known and established sources.
- Fetches standard library packages including
chromadbandsentence-transformersvia pip. - Downloads the official
chromadband@chroma-core/default-embedpackages via npm. - References the official project repository at
github.com/chroma-core/chroma.
Audit Metadata