ai-orchestration-llamaindex
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements patterns for ingesting untrusted data from local directories and external APIs for use in LLM context windows.
- Ingestion points: Data is ingested via
SimpleDirectoryReader(local files) andApiDocumentReader(remote API calls viafetch) inexamples/ingestion.mdandexamples/core.md. - Boundary markers: The examples do not demonstrate the use of explicit delimiters or instructions to ignore embedded commands within the retrieved text chunks.
- Capability inventory: The skill enables agents to perform semantic search, tool calling, and multi-agent orchestration. While it advises against unsafe practices (e.g., "never eval()"), the synthesis of responses from retrieved data could be influenced by malicious instructions embedded in the source documents.
- Sanitization: There is no evidence of sanitization, filtering, or validation of the content fetched from the
ApiDocumentReaderbefore it is converted intoDocumentobjects and indexed.
Audit Metadata