pinecone:query
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Authentication is managed through the PINECONE_API_KEY environment variable, which is the recommended method for handling secrets and avoids hardcoding credentials.
- [SAFE]: All network-related operations and tool calls are directed to the official Pinecone MCP server or reference the official Pinecone domain (pinecone.io).
- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for searching external database records. 1. Ingestion points: User queries and records returned by the search-records tool (SKILL.md). 2. Boundary markers: Absent from the workflow instructions. 3. Capability inventory: Execution of Pinecone MCP tools (search-records, list-indexes, describe-index). 4. Sanitization: Records are formatted for display to the user without being interpreted as executable code.
Audit Metadata