dspy-embedding-retrieval
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill implements a Retrieval-Augmented Generation (RAG) pattern, creating a surface for indirect prompt injection where data from a corpus could influence agent behavior.
- Ingestion points: The
corpusvariable inSKILL.mdandexample.pyis the entry point for data that is later processed by the agent. - Boundary markers: The signature
"context: list[str], question -> answer"used indspy.ChainOfThoughtlacks explicit delimiters or instructions to ignore embedded commands within the retrieved context. - Capability inventory: The skill has the capability to read from and write to the local file system using the
saveandfrom_savedmethods for index persistence. - Sanitization: No sanitization or validation of the retrieved text passages is implemented before they are passed to the reasoning module.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of
faiss-cpuand the use ofsentence-transformersfor local embedding tasks. These are well-known and standard libraries within the machine learning ecosystem.
Audit Metadata