altimate-data-engineering-skills

Warn

Audited by Gen Agent Trust Hub on May 23, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The delegation skill invokes the altimate-code CLI with a --yolo flag. This configuration allows the external tool to execute complex tasks non-interactively, which bypasses the standard AI agent safety cycle of user review and confirmation before execution.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of multiple external software components, including the altimate-code global NPM package and the @altimate/mcp-server-dbt MCP server. These dependencies are sourced from third-party repositories and executed with local permissions.
  • [REMOTE_CODE_EXECUTION]: Users are instructed to clone a remote repository from https://github.com/AltimateAI/data-engineering-skills.git for manual installation, which involves pulling and potentially executing content from an external git source.
  • [COMMAND_EXECUTION]: The automation workflows for dbt and Snowflake involve executing shell commands such as dbt build and dbt show. These operations run in the local shell and interact with environment configurations and data warehouse credentials.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 23, 2026, 10:52 PM
Security Audit — agent-trust-hub — altimate-data-engineering-skills