algolia-search

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill outlines an indexing pipeline that processes data from a database and pushes it to an external search service. This creates a surface where external application content is ingested into the agent's context. (Ingestion points: indexArticle and fullReindex functions in SKILL.md. Boundary markers: None. Capability inventory: Algolia API client operations for record management and index configuration. Sanitization: Content is truncated using slice before indexing).
  • [EXTERNAL_DOWNLOADS]: The implementation relies on the algoliasearch and algoliasearch/lite libraries. These are established, official packages for interacting with Algolia services.
  • [COMMAND_EXECUTION]: The skill provides code examples for managing search index configurations, such as setting searchable attributes and ranking rules. These commands are standard for search administration.
  • [DATA_EXFILTRATION]: Data records are sent to Algolia's official API endpoints for indexing. This is the primary intended function of the skill and follows standard cloud service integration patterns.
  • [CREDENTIALS_UNSAFE]: The documentation mentions APP_ID, ADMIN_KEY, and SEARCH_KEY as placeholders. These are used for illustrative purposes and do not represent hardcoded or exposed secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 05:05 PM