algolia-search
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill outlines an indexing pipeline that processes data from a database and pushes it to an external search service. This creates a surface where external application content is ingested into the agent's context. (Ingestion points: indexArticle and fullReindex functions in SKILL.md. Boundary markers: None. Capability inventory: Algolia API client operations for record management and index configuration. Sanitization: Content is truncated using slice before indexing).
- [EXTERNAL_DOWNLOADS]: The implementation relies on the algoliasearch and algoliasearch/lite libraries. These are established, official packages for interacting with Algolia services.
- [COMMAND_EXECUTION]: The skill provides code examples for managing search index configurations, such as setting searchable attributes and ranking rules. These commands are standard for search administration.
- [DATA_EXFILTRATION]: Data records are sent to Algolia's official API endpoints for indexing. This is the primary intended function of the skill and follows standard cloud service integration patterns.
- [CREDENTIALS_UNSAFE]: The documentation mentions APP_ID, ADMIN_KEY, and SEARCH_KEY as placeholders. These are used for illustrative purposes and do not represent hardcoded or exposed secrets.
Audit Metadata