daily
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a capability reference and architectural guide for the Pipecat framework. All code snippets provided are standard examples of framework usage for building real-time AI agents.
- [EXTERNAL_DOWNLOADS]: Fetches additional documentation from the official Pipecat project at
https://docs.pipecat.ai/llms.txt. This is a well-known service domain for this framework and does not represent a security risk. - [PROMPT_INJECTION]: The skill describes an architecture that processes untrusted external data, creating a surface for indirect prompt injection.
- Ingestion points: User audio via
transport.input()and external data viaweather_api.get_weather. - Boundary markers: Absent from the high-level code snippets.
- Capability inventory: Orchestrates multimodal AI pipelines involving STT, TTS, LLMs, and external tool execution.
- Sanitization: Not explicitly shown in the provided architectural examples.
Audit Metadata