vector-db-cleanup
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
init.pyscript automatically installs necessary Python libraries from arequirements.txtfile usingpip. These dependencies include well-known packages such aschromadb,langchain, andsentence-transformersrequired for vector database operations. - [COMMAND_EXECUTION]: The skill executes system commands via Python's
subprocessmodule to manage dependencies and provides wrappers for database maintenance operations. Specifically,cleanup.pyperforms deletion operations on the vector database to remove stale metadata and embeddings. - [PROMPT_INJECTION]: The skill implements a Retrieval-Augmented Generation (RAG) architecture. As it indexes local files for retrieval, it possesses a surface for indirect prompt injection if the source documents contains malicious instructions.
- Ingestion points: Files are discovered based on the
vector_knowledge_manifest.jsonand read viavector_config.py. - Boundary markers: None identified in the provided scripts.
- Capability inventory: Dependency installation (
init.py) and database deletions (cleanup.py). - Sanitization: Content is indexed as raw text chunks without explicit sanitization logic.
Audit Metadata