pinecone
Enables efficient storage and querying of vector embeddings using the Pinecone vector database API for advanced search capabilities.
Install this skill
or
40/100
Security score
The pinecone skill was audited on May 16, 2026 and we found 24 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 25
Curl to non-GitHub URL
SourceSKILL.md
| 25 | curl -s -X GET "https://api.pinecone.io/indexes" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
medium line 31
Curl to non-GitHub URL
SourceSKILL.md
| 31 | curl -s -X GET "https://api.pinecone.io/indexes/<index-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
medium line 55
Curl to non-GitHub URL
SourceSKILL.md
| 55 | curl -s -X POST "https://api.pinecone.io/indexes" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" --header "Content-Type: application/json" -d @/tmp/pinecone_create_inde |
medium line 63
Curl to non-GitHub URL
SourceSKILL.md
| 63 | curl -s -X DELETE "https://api.pinecone.io/indexes/<index-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
medium line 73
Curl to non-GitHub URL
SourceSKILL.md
| 73 | curl -s -X GET "https://api.pinecone.io/indexes/<index-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
medium line 208
Curl to non-GitHub URL
SourceSKILL.md
| 208 | curl -s -X GET "https://api.pinecone.io/collections" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
medium line 225
Curl to non-GitHub URL
SourceSKILL.md
| 225 | curl -s -X POST "https://api.pinecone.io/collections" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" --header "Content-Type: application/json" -d @/tmp/pinecone_create_ |
medium line 231
Curl to non-GitHub URL
SourceSKILL.md
| 231 | curl -s -X GET "https://api.pinecone.io/collections/<collection-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
medium line 237
Curl to non-GitHub URL
SourceSKILL.md
| 237 | curl -s -X DELETE "https://api.pinecone.io/collections/<collection-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
low line 8
External URL reference
SourceSKILL.md
| 8 | If requests fail, run `zero doctor check-connector --env-name PINECONE_TOKEN` or `zero doctor check-connector --url https://api.pinecone.io/indexes --method GET` |
low line 25
External URL reference
SourceSKILL.md
| 25 | curl -s -X GET "https://api.pinecone.io/indexes" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
low line 31
External URL reference
SourceSKILL.md
| 31 | curl -s -X GET "https://api.pinecone.io/indexes/<index-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
low line 55
External URL reference
SourceSKILL.md
| 55 | curl -s -X POST "https://api.pinecone.io/indexes" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" --header "Content-Type: application/json" -d @/tmp/pinecone_create_inde |
low line 63
External URL reference
SourceSKILL.md
| 63 | curl -s -X DELETE "https://api.pinecone.io/indexes/<index-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
low line 68
External URL reference
SourceSKILL.md
| 68 | Pinecone data plane operations are performed against the index host URL, which is returned in the `host` field when you describe an index (e.g. `https://<index-name>-<project-id>.svc.<environment>.pin |
low line 73
External URL reference
SourceSKILL.md
| 73 | curl -s -X GET "https://api.pinecone.io/indexes/<index-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
low line 76
External URL reference
SourceSKILL.md
| 76 | Use the `host` value from the response in all data plane requests below. Replace `<index-host>` with the full host URL (e.g. `https://my-index-abc123.svc.aped-1234-56ab.pinecone.io`). |
low line 208
External URL reference
SourceSKILL.md
| 208 | curl -s -X GET "https://api.pinecone.io/collections" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
low line 225
External URL reference
SourceSKILL.md
| 225 | curl -s -X POST "https://api.pinecone.io/collections" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" --header "Content-Type: application/json" -d @/tmp/pinecone_create_ |
low line 231
External URL reference
SourceSKILL.md
| 231 | curl -s -X GET "https://api.pinecone.io/collections/<collection-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
low line 237
External URL reference
SourceSKILL.md
| 237 | curl -s -X DELETE "https://api.pinecone.io/collections/<collection-name>" --header "Api-Key: $PINECONE_TOKEN" --header "X-Pinecone-API-Version: 2025-04" |
low line 242
External URL reference
SourceSKILL.md
| 242 | Connect the **Pinecone** connector at [app.vm0.ai/connectors](https://app.vm0.ai/connectors). |
low line 244
External URL reference
SourceSKILL.md
| 244 | > **Troubleshooting:** If requests fail, run `zero doctor check-connector --env-name PINECONE_TOKEN` or `zero doctor check-connector --url https://api.pinecone.io/indexes --method GET` |
low line 248
External URL reference
SourceSKILL.md
| 248 | 1. **Index host vs. control plane**: Use `https://api.pinecone.io` for index management (create, list, delete). Use the per-index `host` URL for vector operations (upsert, query, fetch, delete vectors |
Scanned on May 16, 2026
View Security Dashboard