mixedbread-search
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official Mixedbread libraries (
mixedbreadand@mixedbread/sdk) to interact with its API. These are vendor-provided dependencies and are expected for the skill's functionality.- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes content from external files (PDFs, Markdown) and web searches, which could contain malicious instructions designed to influence the agent's behavior. - Ingestion points: Content is ingested through
stores.files.upload,stores.search, andstores.question_answeringas described inSKILL.md. - Boundary markers: The skill uses
<cite i="n"/>citation tags to attribute sources in the generated answers. - Capability inventory: The skill provides functionality for document indexing, semantic search, agentic multi-step retrieval, and metadata filtering.
- Sanitization: No specific sanitization or filtering of instruction-like content in retrieved chunks is mentioned in the documentation.
Audit Metadata