production-rag-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is primarily educational, providing checklists and code templates for building robust and secure AI infrastructure.
- [EXTERNAL_DOWNLOADS]: The provided Python snippets reference well-known, reputable packages including
redis,structlog, andprometheus_clientfor operational tasks like caching and monitoring. - [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risks associated with processing external data in RAG systems by including specific checklist items for prompt injection detection, input validation, and PII handling.
- [COMMAND_EXECUTION]: No dangerous command execution or privilege escalation patterns were identified; code snippets focus on standard application logic and observability.
Audit Metadata