rag-architect

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill serves as a legitimate technical guide and template library for RAG system design, providing production-grade code examples and architectural trade-off analyses.
  • [EXTERNAL_DOWNLOADS]: Demonstrates how to fetch necessary embedding models and linguistic data from reputable sources such as Hugging Face and NLTK data servers.
  • [COMMAND_EXECUTION]: Provides implementation patterns for interacting with various vector databases (Qdrant, Pinecone, Weaviate, Chroma, pgvector) and LLM providers via their official Python SDKs.
  • [PROMPT_INJECTION]: Identifies a common indirect prompt injection surface inherent in RAG applications where untrusted document content is processed. 1. Ingestion points: Found in SKILL.md and references/chunking-strategies.md via document splitting functions. 2. Boundary markers: The current architectural examples do not include explicit context delimiters (e.g., XML tags) to encapsulate retrieved data. 3. Capability inventory: The pipeline includes capabilities for external API requests (LLM providers) and vector database modifications. 4. Sanitization: Basic regex cleaning logic is suggested in the references/embedding-models.md guidance.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 01:36 AM