Scan Pinecone for memory poisoning, prompt injection and leaked secrets

Mimvo is an open-source Python package for Python 3.11+, published on PyPI. The pinecone extra adds the Pinecone client and nothing else.

pip install "mimvo[pinecone]"

One command reads every record, runs the secrets, injection and poisoning checks, and writes a self-contained HTML report you can forward.

mimvo scan pinecone \  --index agent-memory \  --namespace prod \  --text-field content \  --report report.html

• Use a read-scoped API key. --api-key defaults to the PINECONE_API_KEY environment variable.
• Scan one namespace at a time with --namespace; without it, Mimvo reads the default namespace.
• Set --text-field to the metadata field that holds the text, and --host for a serverless index.

The same scan from your own code, for a scheduled job or a notebook.

from pathlib import Pathfrom mimvo import Mimvofrom mimvo.scan import PineconeScanSource, render_html# Reads PINECONE_API_KEY from the environment.source = PineconeScanSource(index="agent-memory", namespace="prod", text_field="content")report = Mimvo().scan(source)report.source = "pinecone:agent-memory"Path("report.html").write_text(render_html(report), encoding="utf-8")

Thirteen finding codes across three checks. Each finding comes with a severity, a recommended action, the evidence (secrets masked), fix steps, and an OWASP and CWE mapping. Details are in the finding code reference.

Fail the job on high-severity findings, send results to GitHub code scanning as SARIF, and put a summary on the run page. See Use in CI for a full GitHub Actions workflow.

mimvo scan pinecone \  --index agent-memory \  --namespace prod \  --text-field content \  --fail-on high \  --sarif mimvo.sarif \  --markdown "$GITHUB_STEP_SUMMARY"

Lists and fetches vectors with metadata. Never upserts or deletes.

The default detectors run on your machine with no API key and no model download, so memory text does not leave it. Secret values are masked in every report. Hosted detectors are opt-in.

• ChScan Chroma
• QdScan Qdrant
• pgScan Postgres and pgvector
• LCScan LangChain and LangGraph
• m0Scan mem0
• {}Scan JSONL exports