qdrant-vector-search
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents Retrieval-Augmented Generation (RAG) patterns which are inherently susceptible to indirect prompt injection if the ingested documents contain malicious instructions. This is a standard risk for the described use case.
- Ingestion points: The
upsertandretrievefunctions inSKILL.mdprocess document text and user queries into the vector database. - Boundary markers: None identified; the examples use standard interpolation into prompt strings.
- Capability inventory: The skill uses
qdrant-clientfor network-based database operations (upsert,search,create_collection). - Sanitization: No explicit sanitization or validation of input data is demonstrated in the basic examples.
- [COMMAND_EXECUTION]: The documentation includes standard shell commands for environment setup, package management, and service health checks.
- Evidence:
pip install,docker run,docker ps, andcurlcommands are provided inSKILL.mdandreferences/troubleshooting.mdfor local development setup. - [PRIVILEGE_ESCALATION]: The troubleshooting guide mentions administrative commands for managing local service daemons.
- Evidence:
sudo systemctl start dockerinreferences/troubleshooting.mdis provided as a fix for common Docker connection issues.
Audit Metadata