airflow

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation reference and does not contain any malicious logic or obfuscated instructions.
  • [EXTERNAL_DOWNLOADS]: Installation resources and configuration files are downloaded from official and well-known sources.
  • Fetches docker-compose.yaml from airflow.apache.org.
  • Uses constraints files from the apache/airflow GitHub repository.
  • Adds Helm charts from the official apache-airflow repository.
  • [CREDENTIALS_UNSAFE]: Heuristic detections of hardcoded credentials in references/09-executors.md were evaluated and found to be benign documentation placeholders.
  • The connection string postgresql://airflow:airflow@postgres/airflow represents standard default credentials used in official Airflow development examples.
  • [COMMAND_EXECUTION]: The skill documents standard administrative CLI commands (e.g., airflow dags trigger, docker compose up) required for the normal operation of the software.
  • [SAFE]: The maintenance script scripts/check-updates.py performs legitimate integrity checks and version lookups using the official PyPI API.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — airflow