algolia-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing local repository files, creating a vulnerability surface where malicious instructions embedded in source code or fixtures could influence the agent's behavior.
- Ingestion points: Local source code, client wrappers, package scripts, and test fixtures are read using
Read,Glob, andGreptools. - Capability inventory: The agent has the ability to modify the filesystem using
WriteandEdittools and can perform network requests to Algolia's documentation usingWebFetch. - Boundary markers: The instructions do not define specific delimiters or guardrails to prevent the agent from obeying instructions found within the repository data.
- Sanitization: There is no evidence of filtering or validation logic applied to the content retrieved from the repository files before it is processed.
Audit Metadata