pinecone
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and integration guide for the Pinecone vector database. All analyzed components, including installation instructions and code snippets, align with legitimate usage of the service.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The code snippets correctly utilize placeholders like
"your-api-key"and"your-key", encouraging users to provide their own secrets securely. - [EXTERNAL_DOWNLOADS]: All external references point to well-known and trusted services, including official Pinecone domains (
pinecone.io,app.pinecone.io) and reputable open-source libraries (LangChain, LlamaIndex). - [INDIRECT_PROMPT_INJECTION]: The skill describes an architecture for ingesting and querying external data (RAG). While this creates a surface for indirect prompt injection at the application level, the skill does not implement any dangerous capabilities (such as shell execution or file system writes) that could be exploited through this vector. It maintains a safe boundary for its intended purpose.
Audit Metadata