mongodb-search-and-ai
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill maintains an attack surface for indirect prompt injection by processing untrusted search queries and schema data.
- Ingestion points: Untrusted data enters the agent context through user search queries and collection schema metadata retrieved via MCP tools in
SKILL.md. - Boundary markers: The instructions lack explicit boundary markers or specific warnings to ignore embedded instructions within user-provided query strings.
- Capability inventory: The skill utilizes powerful capabilities including
create-indexandaggregatetools as documented inSKILL.md. - Sanitization: There are no instructions for sanitizing or escaping the data retrieved from collection schemas or user inputs before they are interpolated into aggregation pipelines.
Audit Metadata