rag-retrieval

Pass

Audited by Gen Agent Trust Hub on Feb 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides high-quality reference architectures and implementation scripts for RAG systems. It is informative and does not contain malicious code.
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads dependencies for well-known and trusted services including OpenAI, Anthropic, Voyage AI, Pinecone, and Tavily. These are standard components for the skill's stated purpose and are documented neutrally.
  • [PROMPT_INJECTION]: Prompt templates included in the skill (such as those for Self-RAG and basic RAG) incorporate grounding instructions like 'Answer using ONLY the provided context'. These are best-practice defensive measures to minimize hallucinations and do not attempt to bypass safety filters.
  • [DATA_EXFILTRATION]: The skill does not access sensitive local files or exfiltrate data. Credentials in templates are managed via environment variables, and network operations are confined to the intended AI service APIs.
  • [COMMAND_EXECUTION]: No dangerous shell command execution or subprocess spawning was found. File system interactions are limited to standard PDF and image processing logic required for multimodal RAG.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 26, 2026, 04:29 PM