weaviate
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/example_data.pyscript downloads datasets from Hugging Face Hub, a well-known service, to create example collections. This behavior is documented and serves the intended purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external files (scripts/import.py) and database query results. Ingested data is delimited in the agent context using Markdown tables. The skill possesses capabilities for network operations (Weaviate API) and local file access. Basic sanitization is performed by escaping Markdown-specific characters in the output.
Audit Metadata