rag-implementation

Pass

Audited by Gen Agent Trust Hub on May 29, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill documents RAG implementation patterns which involve processing external, untrusted content. This represents an indirect prompt injection surface. 1. Ingestion points: Context is retrieved from vector stores in several code examples throughout SKILL.md. 2. Boundary markers: The prompt templates use standard delimiters but lack specific instructions to the model to ignore embedded commands within the context. 3. Capability inventory: The skill provides logic for document retrieval and LLM answer generation. 4. Sanitization: The examples do not demonstrate sanitization or filtering of the retrieved document content.
Audit Metadata
Risk Level
SAFE
Analyzed
May 29, 2026, 04:27 PM
Security Audit — agent-trust-hub — rag-implementation