doris-best-practices

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • CLI Tool Integration: The skill provides instructions for using the doriscli management tool to perform cluster diagnostics. This involves environment detection using the DORIS_CLI_PATH variable and executing commands such as profile get and tablet health checks. These operations are intended for local troubleshooting of the user's database environment.
  • Official Package Reference: The documentation references the installation of the @apache-doris/doriscli package via NPM. This is an official utility provided by the Apache Doris project and is required for the skill's diagnostic functionality.
  • Internal API Interaction: The skill describes fetching performance metrics from the Apache Doris Frontend (FE) REST API (ports 8030/8080). These network operations are directed at the user's own database infrastructure to retrieve execution profiles for analysis.
  • Evidence-First Diagnostic Policy: The skill implements a strict policy requiring the collection of runtime evidence (e.g., query plans or profiles) before suggesting optimizations. This safety-conscious approach ensures that changes are based on observed data rather than heuristics.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 12:46 PM
Security Audit — agent-trust-hub — doris-best-practices