dbt
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality documentation and reference material for analytics engineering with dbt. It follows standard industry best practices for data transformation and project management.
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing dbt adapters via
pipfrom the official Python Package Index (PyPI) and managing project dependencies usingdbt deps. These operations target well-known, trusted services and registries. - [DATA_EXPOSURE_AND_EXFILTRATION]: The guide correctly promotes security best practices by documenting the use of environment variables for managing sensitive database credentials (e.g., in
profiles.ymland.envfiles) rather than hardcoding secrets in the codebase. - [COMMAND_EXECUTION]: The skill provides standard command-line interface (CLI) examples for using dbt (e.g.,
dbt run,dbt build,dbt test). These are legitimate administrative and development commands for the technology described. - [DYNAMIC_EXECUTION]: Includes a utility script (
scripts/check-updates.py) for maintaining the skill's currency against upstream dbt versions. The script performs standard network requests to PyPI and file system checks; it contains no dynamic code execution, command injection vectors, or unauthorized subprocess operations.
Audit Metadata