mixedbread-search

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official Mixedbread libraries (mixedbread and @mixedbread/sdk) to interact with its API. These are vendor-provided dependencies and are expected for the skill's functionality.- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes content from external files (PDFs, Markdown) and web searches, which could contain malicious instructions designed to influence the agent's behavior.
  • Ingestion points: Content is ingested through stores.files.upload, stores.search, and stores.question_answering as described in SKILL.md.
  • Boundary markers: The skill uses <cite i="n"/> citation tags to attribute sources in the generated answers.
  • Capability inventory: The skill provides functionality for document indexing, semantic search, agentic multi-step retrieval, and metadata filtering.
  • Sanitization: No specific sanitization or filtering of instruction-like content in retrieved chunks is mentioned in the documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 09:37 AM