Skills
skills/orchestra-research/ai-research-skills/pinecone/Gen Agent Trust Hub

pinecone

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOWEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS] (INFO): The skill references the official pinecone-client package and integration libraries such as langchain-pinecone and llama-index-vector-stores-pinecone.
  • [PROMPT_INJECTION] (LOW): Vulnerability surface for Indirect Prompt Injection (Category 8). 1. Ingestion points: upsert() (metadata and values) and query() (vector and filter) parameters. 2. Boundary markers: Absent in code snippets. 3. Capability inventory: CRUD operations on vector data (upsert, query, delete). 4. Sanitization: No explicit sanitization or validation shown for external data before storage or retrieval.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 01:38 AM