llamaindex
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions and examples for building RAG (Retrieval-Augmented Generation) pipelines that ingest data from various untrusted sources.
- Ingestion points:
SimpleDirectoryReader(SKILL.md),SimpleWebPageReader(SKILL.md),GithubRepositoryReader(SKILL.md),JSONReader(SKILL.md), andDatabaseReader(SKILL.md) are documented as methods to bring external data into the agent's context. - Boundary markers: The prompt template examples, such as the
qa_promptinSKILL.mdandreferences/query_engines.md, do not include explicit delimiters or instructions to ignore commands embedded within the retrieved context. - Capability inventory: The skill demonstrates capabilities for file system access (
SimpleDirectoryReader), network requests for scraping (BeautifulSoupWebReader), and database connectivity (DatabaseReader). - Sanitization: The provided code snippets do not illustrate methods for sanitizing or validating the content retrieved from external sources before it is processed by the LLM.
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing necessary software components from standard, well-known package registries.
- Evidence:
pip install llama-indexand various integration packages likellama-index-llms-openaiare referenced inSKILL.md. - [COMMAND_EXECUTION]: The skill contains instructions for the user to execute shell commands for environment setup.
- Evidence: Installation commands for
pipandbashexamples are provided in the 'Quick start' and 'Installation' sections ofSKILL.md.
Audit Metadata