ai-pipeline-orchestration
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents workflows that ingest data from external sources and process them through Large Language Models (LLMs).
- Ingestion points: The
rag_ingestion_pipelinefetches documents from user-providedsource_urlstrings (SKILL.md), and thebatch_inference_flowreads data from aninput_file(SKILL.md). - Boundary markers: The provided design sketches do not include specific delimiters or instructions for the model to ignore embedded commands within the processed data.
- Capability inventory: The pipelines have access to network operations (fetching documents), file system writes (storing results), and cloud compute resources via the KubernetesPodOperator (Airflow) or the OpenAI API (Prefect).
- Sanitization: No sanitization or validation of the fetched document content or input file lines is implemented before they are chunked, embedded, or sent to the LLM.
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install third-party packages from public registries.
- Evidence: The skill suggests running
pip install prefect prefect-kubernetesand imports libraries such assentence-transformers,qdrant-client, andopenai(SKILL.md). These are well-known industry-standard libraries used for AI and orchestration tasks.
Audit Metadata