vector-db-cleanup
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary purpose is database maintenance, specifically pruning orphaned records. No malicious patterns, such as data exfiltration or unauthorized access, were detected.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local maintenance scripts (cleanup.py and vector_consistency_check.py). These executions are part of the intended functionality and target local scripts within the plugin structure.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection during database pruning. 1. Ingestion points: reads file source paths from the ChromaDB vector store (SKILL.md). 2. Boundary markers: none specified. 3. Capability inventory: executes local Python scripts via Bash tool to delete records. 4. Sanitization: none specified. The risk is considered low as the operation is limited to deleting records for files that are verified as missing from the disk.
Audit Metadata