vector-database-ops
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for constructing database queries based on external data, creating a potential surface for indirect prompt injection.\n
- Ingestion points: Data enters the agent's context through
query_embeddingvectors and metadata filter values (such astenant_idanddoc_type) used in the Python and SQL snippets inSKILL.md.\n - Boundary markers: The provided code templates do not include specific delimiters or instructions to the agent to disregard instructions potentially embedded within the data.\n
- Capability inventory: The skill describes operations involving
dockerfor service deployment, theqdrant_clientPython library for database operations, and SQL execution via thepgvectorextension inSKILL.md.\n - Sanitization: The example snippets do not demonstrate input sanitization or schema validation for the processed metadata values.
Audit Metadata