faiss
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTION
Full Analysis
- Dynamic Execution (MEDIUM): The LangChain integration example in
SKILL.mdincludes the parameterallow_dangerous_deserialization=True. This flag allows the library to use Python'spicklemodule to load data, which is a known security risk. If a user loads a FAISS index from an untrusted source with this setting enabled, it could result in arbitrary code execution on the host system.
Audit Metadata