pinecone-full-text-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by 'pinecone-io' and all documented resources (SDK versions, API endpoints, and documentation links) correctly point to official Pinecone infrastructure. There is no evidence of typosquatting or impersonation.
- [SAFE]: The packaged script
scripts/ingest.pyperforms legitimate bulk operations (batching, error handling, and polling). It does not contain any obfuscated code, unauthorized privilege escalation, or persistence mechanisms. - [SAFE]: Security best practices are actively promoted: the documentation explicitly instructs users to store sensitive API keys in environment variables rather than hardcoding them. The script provided reads
PINECONE_API_KEYfrom the environment safely. - [SAFE]: No prompt injection or behavior override patterns were detected in the instructions. The skill correctly limits its scope to technical indexing and querying tasks.
- [SAFE]: External dependencies are restricted to well-known, version-pinned packages (
pinecone==10.0.0andtyper) from standard registries. No remote code execution (curl-to-bash) or untrusted downloads are present.
Audit Metadata