vector-db-setup
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install standard, well-known libraries from the npm registry to support vector database interactions, specifically:
@pinecone-database/pinecone,chromadb,pg,pgvector,@qdrant/js-client-rest, andlangchain. - [INDIRECT_PROMPT_INJECTION]: The skill defines a document processing pipeline that ingests raw text for embedding and storage (
ingestDocumentsinpipeline/ingest.ts). This is a standard surface for document indexing skills. - Ingestion points: The
RawDocumentinterface inpipeline/ingest.tsaccepts external content for processing. - Boundary markers: None are present in the provided code snippets.
- Capability inventory: The skill includes functions for database writes (upserts) and network communication with embedding providers (OpenAI API).
- Sanitization: The provided snippets demonstrate basic text splitting without specific sanitization or instruction-filtering for the ingested content.
Audit Metadata