weaviate-cookbooks
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading and installing development tools. In
references/pdf_multimodal_rag.md, it includes commands to fetch installation scripts foruvfromastral.shandollamafromollama.com. Both are well-known technology service providers. The instructions explicitly recommend that the user review the script contents usinglessbefore execution, which is a security best practice. - [COMMAND_EXECUTION]: Standard package management commands (
uv add,npm i,npx) and system dependency installation (sudo apt-get install poppler-utils) are documented for setting up the development environment. - [CREDENTIALS_SAFE]: The skill emphasizes secure handling of API keys. In
references/project_setup.md, it mandates creating a.gitignorefile that includes.envbefore any secrets are added. It also suggests configuring.claude/settings.jsonwith explicit deny rules to prevent the AI agent from reading local environment files, significantly reducing the risk of accidental secret exposure.
Audit Metadata