weaviate-cookbooks

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading and installing development tools. In references/pdf_multimodal_rag.md, it includes commands to fetch installation scripts for uv from astral.sh and ollama from ollama.com. Both are well-known technology service providers. The instructions explicitly recommend that the user review the script contents using less before execution, which is a security best practice.
  • [COMMAND_EXECUTION]: Standard package management commands (uv add, npm i, npx) and system dependency installation (sudo apt-get install poppler-utils) are documented for setting up the development environment.
  • [CREDENTIALS_SAFE]: The skill emphasizes secure handling of API keys. In references/project_setup.md, it mandates creating a .gitignore file that includes .env before any secrets are added. It also suggests configuring .claude/settings.json with explicit deny rules to prevent the AI agent from reading local environment files, significantly reducing the risk of accidental secret exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 02:36 AM