cli-anything-chromadb
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing the
cli-anything-chromadbpackage from a public registry. This tool provides the core functionality described in the skill and originates from the skill's author. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and retrieval of text data through its document management and search commands.
- Ingestion points: Data enters the system via the
--documentflag in thedocument addcommand and the--textflag in thequery searchcommand. - Boundary markers: No specific delimiters or safety warnings for embedded instructions are defined in the command-line usage instructions.
- Capability inventory: The CLI interacts with a ChromaDB server over the network to store, retrieve, and query vector data.
- Sanitization: The documentation does not specify sanitization procedures for the input text, though this is typical for a database client.
Audit Metadata