embedding-strategies
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external document data which could contain malicious instructions designed to influence the agent's behavior during embedding or subsequent retrieval tasks.
- Ingestion points: Document content enters the system via the
process_documentsmethod in theDomainEmbeddingPipelineclass withinSKILL.md. - Boundary markers: No explicit instruction delimiters or boundary markers are defined in the code templates to separate metadata from user content.
- Capability inventory: The skill performs network operations using the
openaiPython library to generate embeddings. - Sanitization: The
_default_preprocessmethod performs basic regex-based cleaning (whitespace and special character removal), but does not specifically filter for prompt injection markers. - [SAFE]: All identified Python libraries and external URLs refer to well-known, legitimate technology services and organizations.
- Code templates utilize standard, industry-accepted libraries including
openai,sentence_transformers,tiktoken,nltk,scipy, andnumpy. - External links point to official documentation and community leaderboards on
openai.com,sbert.net, andhuggingface.co.
Audit Metadata