embedding-strategies
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
sentence-transformerslibrary to fetch pre-trained embedding models from Hugging Face andtiktokenfor tokenization encodings. These resources are downloaded from well-known and established model registries. - [INDIRECT_PROMPT_INJECTION]: The skill contains logic for ingesting untrusted external data (e.g.,
process_documentsinSKILL.md). This establishes an ingestion surface where malicious instructions embedded in the processed text could potentially influence agent behavior during retrieval tasks. Evidence chain: 1. Ingestion point:process_documentsandchunk_by_tokensfunctions inSKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Includes network-based API calls for embeddings and local model inference. 4. Sanitization: Absent; the skill performs basic whitespace and character removal but does not filter for prompt-injection markers.
Audit Metadata