llm-index
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's instructions require fetching the
mindexCLI tool from the author's public GitHub repository (https://github.com/varlabz/mindex). - [REMOTE_CODE_EXECUTION]: The skill utilizes
uvxto execute code directly from the vendor's Git repository (git+https://github.com/varlabz/mindex), which is the designated method for the tool's operation. - [COMMAND_EXECUTION]: The skill uses shell commands to interface with the
mindextool for indexing, searching, and reading local filesystem data. - [PROMPT_INJECTION]: The skill processes potentially untrusted data from local files, creating a surface for indirect prompt injection. Ingestion points: Data is ingested through
mindex search,fsearch, andreadcommands inSKILL.md. Boundary markers: The skill lacks explicit delimiters or instructions for the agent to ignore commands embedded within the retrieved file content. Capability inventory: The agent is authorized to use theshelltool for executing filesystem and indexing commands. Sanitization: There is no documented validation or filtering of the file content before it is processed by the agent.
Audit Metadata