airflow
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation reference and does not contain any malicious logic or obfuscated instructions.
- [EXTERNAL_DOWNLOADS]: Installation resources and configuration files are downloaded from official and well-known sources.
- Fetches
docker-compose.yamlfromairflow.apache.org. - Uses constraints files from the
apache/airflowGitHub repository. - Adds Helm charts from the official
apache-airflowrepository. - [CREDENTIALS_UNSAFE]: Heuristic detections of hardcoded credentials in
references/09-executors.mdwere evaluated and found to be benign documentation placeholders. - The connection string
postgresql://airflow:airflow@postgres/airflowrepresents standard default credentials used in official Airflow development examples. - [COMMAND_EXECUTION]: The skill documents standard administrative CLI commands (e.g.,
airflow dags trigger,docker compose up) required for the normal operation of the software. - [SAFE]: The maintenance script
scripts/check-updates.pyperforms legitimate integrity checks and version lookups using the official PyPI API.
Audit Metadata