embedding-strategies
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes templates that download pre-trained machine learning models for local execution.
- Evidence: Templates in
SKILL.mdreferenceBAAI/bge-large-en-v1.5andintfloat/multilingual-e5-largefor use with thesentence-transformerslibrary, which fetches these from the Hugging Face Hub. - [INDIRECT_PROMPT_INJECTION]: The skill provides an ingestion pipeline for external data, which is a common surface for indirect prompt injection attacks.
- Ingestion points: The
process_documentsmethod in theDomainEmbeddingPipelineclass (SKILL.md) accepts raw document content for chunking and embedding. - Boundary markers: While the skill suggests preprocessing, it does not implement specific delimiters or instructions for the agent to ignore embedded commands within the ingested text.
- Capability inventory: The skill interacts with embedding APIs (OpenAI, Voyage AI) and local libraries to generate vector representations.
- Sanitization: Includes a
_default_preprocessmethod that performs basic cleaning using regular expressions to remove excessive whitespace and non-alphanumeric characters.
Audit Metadata