algolia-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the local repository and external documentation, which may contain embedded instructions.
- Ingestion points: local source code, built assets, and logs via Read, Glob, and Grep tools, and external documentation via WebFetch.
- Boundary markers: No delimiters or specific instructions to ignore embedded commands are present in the instruction set.
- Capability inventory: The skill employs Read, Glob, Grep, WebFetch, Write, and Edit tools to conduct the audit and remediate findings.
- Sanitization: No sanitization, validation, or filtering of the ingested content is specified.
- [EXTERNAL_DOWNLOADS]: Fetches current API reference and implementation guidelines from Algolia's official documentation using the WebFetch tool.
Audit Metadata