qdrant-vector-search
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes Retrieval-Augmented Generation (RAG) workflows that ingest untrusted data from external vector storage.\n
- Ingestion points: Data is retrieved via
client.searchandclient.scrollinSKILL.mdandreferences/advanced-usage.md.\n - Boundary markers: The examples do not demonstrate the use of delimiters to isolate retrieved context from the agent's system instructions.\n
- Capability inventory: The skill relies on
qdrant-clientfor data retrieval and standard LLM prompt construction. No high-risk capabilities (like shell execution) are applied to the ingested data.\n - Sanitization: The documentation does not specify sanitization or validation steps for payloads fetched from the database.\n- [EXTERNAL_DOWNLOADS]: The documentation references official packages and Docker images from well-known sources.\n
- Recommends installing
qdrant-clientfrom standard registries.\n - Mentions pulling official images from the
qdrant/qdrantDocker Hub repository.\n- [PRIVILEGE_ESCALATION]: The troubleshooting guide includes commands requiring elevated permissions.\n references/troubleshooting.mdsuggestssudo systemctl start dockerto resolve environment issues.\n- The use of
sudois confined to illustrative troubleshooting text for the user.
Audit Metadata