algolia-search
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing code templates and architectural patterns for Algolia integration.
- [CREDENTIALS_SAFE]: Code examples correctly demonstrate the use of environment variables (e.g.,
process.env.ALGOLIA_ADMIN_KEY) and explicitly warn against hardcoding credentials or exposing sensitive Admin API keys in client-side code. - [REMOTE_CODE_EXECUTION]: No patterns involving the execution of remote scripts or unverified third-party code were found.
- [DATA_EXFILTRATION]: The skill emphasizes the 'least-privilege' principle, recommending search-only keys for frontends and secured API keys with filters (e.g.,
filters: 'userId:"${userId}"') to ensure users can only access their own data. - [PROMPT_INJECTION]: The instructions do not contain any attempt to override agent behavior or safety filters.
- [OBFUSCATION]: No obfuscated content, encoded strings, or hidden characters were detected.
Audit Metadata