pinecone-quickstart

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses uv run to execute scripts that fetch dependencies. These dependencies (pinecone, typer) are well-known packages from the Pinecone organization or widely used developer tools, which are considered safe sources.
  • [COMMAND_EXECUTION]: The skill executes local Python scripts using uv run for upserting data and querying the Pinecone index. These scripts are bundled with the skill and perform standard database operations.
  • [DATA_EXPOSURE]: The skill requests the user to set a PINECONE_API_KEY in their environment or a .env file. This follows industry best practices for secret management and does not exfiltrate credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 10:20 PM