ai-rag-pipeline
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from web searches and URL extraction (via Tavily and Exa) to be used as context for LLM responses. This represents a standard RAG attack surface where malicious content on the web could attempt to influence the agent's behavior.
- Ingestion points: Examples in
SKILL.mddemonstrate fetching results into variables like$SEARCH,$CONTENT, and$EVIDENCEwhich are then interpolated into prompts. - Boundary markers: Examples use section headers (e.g., '== Overview =='), but do not employ robust isolation or 'ignore embedded instructions' delimiters.
- Capability inventory: Interacts with external search and LLM APIs via the
beltCLI tool. - Sanitization: No explicit validation or filtering of the retrieved content is performed before interpolation.
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions from the author's official GitHub repository (
inference-sh/skills). This is a legitimate vendor resource used for setting up the required environment.
Audit Metadata