pinecone-cli
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Pinecone CLI from official sources including Homebrew (pinecone-io/tap) and GitHub Releases (github.com/pinecone-io/cli/releases). These are verified vendor channels.
- [COMMAND_EXECUTION]: Uses shell commands to manage Pinecone resources, including index creation, vector upserts, and organization management.
- [CREDENTIALS_UNSAFE]: Provides instructions for creating and exporting API keys and service account credentials (PINECONE_CLIENT_ID, PINECONE_CLIENT_SECRET) to authenticate the CLI. This is standard for the tool's operation.
- [INDIRECT_PROMPT_INJECTION]: Ingests external vector data and metadata from JSON/JSONL files and query results, creating a potential surface for indirect prompt injection if the source data is untrusted.
Audit Metadata