OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The Pinecone Assistant skill provides a set of tools for managing Retrieval-Augmented Generation (RAG) workflows. It enables users to create assistants, index local documents, and query them for cited answers. The skill correctly manages API keys via environment variables and interacts with the official Pinecone service. It presents a potential surface for indirect prompt injection via the content of indexed files, but otherwise follows best practices for its intended purpose.
Detected behaviors
No alerts
No issues
6/13 files flagged
Score: 93/100 · 2 sections analyzed