algolia-reference-architecture

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze local repository code and configuration files, creating a surface where untrusted data could influence the agent's actions.
  • Ingestion points: The skill uses Read, Glob, and Grep tools to inspect local repository content as specified in the Tool Discipline section.
  • Boundary markers: The skill lacks explicit instructions for the agent to ignore or delimit embedded instructions within the ingested code.
  • Capability inventory: The skill has access to Write and Edit tools, allowing it to modify the local filesystem based on its analysis.
  • Sanitization: There are no defined mechanisms to sanitize or validate the content read from the repository before processing it.
  • [EXTERNAL_DOWNLOADS]: The skill uses WebFetch to retrieve information from official Algolia documentation sites (e.g., algolia.com). These references target a well-known service and are used to ensure the architecture review aligns with current provider behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 11:44 AM