knowledge-base-qa-assistant

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 19, 2026, 3:04 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's declared purpose (building a private document Q&A knowledge base) matches its instructions and requested resources; it is an instruction-only skill with no surprising installs or credential requests.

This skill looks internally consistent, but it's instruction-only: it describes what to do without providing code or installers. Before you rely on it, confirm where uploaded documents and the vector index will actually be stored and who can access them (encryption at rest, access controls, retention policy). Verify what tooling will perform PDF/Word/PPT parsing and embeddings (local libraries versus third-party APIs). If embeddings or LLM calls go to an external provider, sensitive content could be sent off-host—make sure that matches your privacy requirements. Finally, never paste production secrets into chat; the OAuth client_id/client_secret example is illustrative and should not be supplied unless you intentionally integrate the skill with an OAuth provider.