dbt

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides high-quality documentation and reference material for analytics engineering with dbt. It follows standard industry best practices for data transformation and project management.
  • [EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing dbt adapters via pip from the official Python Package Index (PyPI) and managing project dependencies using dbt deps. These operations target well-known, trusted services and registries.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The guide correctly promotes security best practices by documenting the use of environment variables for managing sensitive database credentials (e.g., in profiles.yml and .env files) rather than hardcoding secrets in the codebase.
  • [COMMAND_EXECUTION]: The skill provides standard command-line interface (CLI) examples for using dbt (e.g., dbt run, dbt build, dbt test). These are legitimate administrative and development commands for the technology described.
  • [DYNAMIC_EXECUTION]: Includes a utility script (scripts/check-updates.py) for maintaining the skill's currency against upstream dbt versions. The script performs standard network requests to PyPI and file system checks; it contains no dynamic code execution, command injection vectors, or unauthorized subprocess operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — dbt