vector
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents the official zilliz CLI tool, which is managed by the vendor zilliztech. All commands and operations are consistent with the skill's stated purpose of managing vector database collections.\n- [COMMAND_EXECUTION]: The skill provides instructions for executing the zilliz CLI tool. The use of $(cat data.json) is a standard shell method for passing local file content to the CLI during insertion operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it retrieves data from external collections. \n
- Ingestion points: Data is ingested via zilliz vector search, query, and get commands in SKILL.md. \n
- Boundary markers: None identified in the prompt instructions. \n
- Capability inventory: The skill uses the zilliz CLI for database operations (insert, search, hybrid-search, delete) in SKILL.md. \n
- Sanitization: No explicit sanitization or filtering of the retrieved vector metadata is mentioned.
Audit Metadata