pp-weaviate-collections
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a command-line tool using
npxandgo installfrom repositories associated with the vendormvanhorn(github.com/mvanhorn/*and@mvanhorn/*).- [COMMAND_EXECUTION]: The skill executes theweaviate-collections-pp-clibinary with various subcommands and user-provided arguments to perform schema management tasks.- [DATA_EXFILTRATION]: The tool provides a--deliver webhook:<url>feature that enables routing any command's output to an external HTTP endpoint. It also includes a feedback mechanism that can transmit local journal data to a remote server if configured by the user.- [REMOTE_CODE_EXECUTION]: The skill implements an automated learning loop where the agent is instructed to execute dynamically generated command sequences ('playbooks') and 'candidate' actions suggested by the CLI at runtime based on the local command history.- [PROMPT_INJECTION]: The learning loop mechanism introduces a surface for indirect prompt injection, as the agent is directed to follow suggested command sequences derived from local logs. - Ingestion points: Command patterns and playbook steps are ingested from a local SQLite store via the
weaviate-collections-pp-cli recallcommand. - Boundary markers: No explicit safety delimiters or validation steps are defined for the suggested commands before execution.
- Capability inventory: The agent can execute arbitrary shell commands and perform network operations via the webhook delivery system.
- Sanitization: The agent is instructed to follow suggested 'trial commands' verbatim without prior sanitization or filtering.
Audit Metadata