pinecone-full-text-search
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
pineconePython library (version 9.0 or higher) and thetyperlibrary. These are standard, well-known packages from the official vendor and the Python Package Index (PyPI). - [COMMAND_EXECUTION]: The skill uses
uv runto execute a local helper script (scripts/ingest.py) for data ingestion. The script logic is transparent and focused on bulk-uploading JSONL data to Pinecone's API. - [DATA_EXFILTRATION]: While the skill involves sending data to an external service (Pinecone), this is the explicitly stated purpose of the skill. The operations are performed using the official Pinecone SDK and target the vendor's own domain (
pinecone.io). - [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing the agent and user to use the
PINECONE_API_KEYenvironment variable for authentication, rather than providing or requesting hardcoded secrets.
Audit Metadata