llamaindex
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions to use the system shell to install the
llama-indexlibrary and its associated integrations viapip. - [EXTERNAL_DOWNLOADS]: The installation steps involve downloading official packages from the Python Package Index (PyPI). These are standard dependencies for the LlamaIndex framework.
- [PROMPT_INJECTION]: The skill documents the creation of systems that ingest untrusted data from various sources, which constitutes a surface for indirect prompt injection.
- Ingestion points: Data is ingested via
SimpleDirectoryReader(local file system),SimpleWebPageReader(external URLs), andDatabaseReader(database queries) inSKILL.md. - Boundary markers: The provided examples do not explicitly demonstrate the use of prompt delimiters or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill facilitates file system access, network requests (web reading), and database connectivity to build knowledge bases.
- Sanitization: No specific content sanitization, validation, or filtering of external data is demonstrated in the basic configuration examples.
Audit Metadata