api-vector-db-chroma
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates Retrieval-Augmented Generation (RAG) by providing patterns for document storage and retrieval. This creates a standard attack surface where untrusted data stored in the database could potentially influence agent behavior if retrieved and processed without sanitization.
- Ingestion points:
collection.addandcollection.upsertmethods inSKILL.mdandexamples/core.mdallow for the ingestion of external document content. - Boundary markers: The provided patterns do not include specific delimiters or warnings to ignore instructions embedded within retrieved data.
- Capability inventory: The skill utilizes the
chromadbclient to perform network requests to a Chroma server and manages document storage. - Sanitization: The examples do not demonstrate explicit sanitization or validation of document content before or after retrieval.
- [EXTERNAL_DOWNLOADS]: The documentation recommends installing official packages from the Chroma ecosystem, such as
chromadband various@chroma-core/*embedding provider packages, which are standard dependencies for the described functionality.
Audit Metadata