rag-engineer
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses
curlto interact with external LLM APIs andpsqlto manage vector database schemas and queries withinSKILL.md. - [EXTERNAL_DOWNLOADS]: Communicates with well-known service providers including OpenAI (
api.openai.com) for embeddings and Anthropic (api.anthropic.com) for message generation. - [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by design, as it involves retrieving and processing external document content for use in LLM prompts.
- Ingestion points: Functions
chunk_textandchunk_by_paragraphsinSKILL.mdingest raw text from external sources. - Boundary markers: Code snippets do not demonstrate the use of XML tags or specific delimiters to isolate retrieved context from instructions.
- Capability inventory: The skill uses
curlfor network requests to AI providers andpsqlfor database operations. - Sanitization: No explicit sanitization or filtering of retrieved document content is implemented in the provided Python or Bash examples.
Audit Metadata