pinecone-quickstart
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uv runto execute scripts that fetch dependencies. These dependencies (pinecone,typer) are well-known packages from the Pinecone organization or widely used developer tools, which are considered safe sources. - [COMMAND_EXECUTION]: The skill executes local Python scripts using
uv runfor upserting data and querying the Pinecone index. These scripts are bundled with the skill and perform standard database operations. - [DATA_EXPOSURE]: The skill requests the user to set a
PINECONE_API_KEYin their environment or a.envfile. This follows industry best practices for secret management and does not exfiltrate credentials.
Audit Metadata