harvard-artifacts-etl-analytics
Pass
Audited by Gen Agent Trust Hub on May 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone a source code repository from GitHub to initialize the project environment (github.com/Manali0711/Harvard-Artifacts-Collection-Data-Engineering-Analytics-App.git).\n- [COMMAND_EXECUTION]: Provides standard command-line instructions for environment setup, including repository cloning, dependency installation via pip, and launching the Streamlit application.\n- [SAFE]: Follows security best practices by using .env files and the python-dotenv library to manage sensitive information like API keys and database credentials, keeping them out of the source code.\n- [SAFE]: Utilizes parameterized queries with the mysql-connector-python library (using %s placeholders) to safely interact with the database, effectively preventing SQL injection vulnerabilities.\n- [SAFE]: Implements rate limiting (time.sleep) during the data extraction phase to respect the Harvard Art Museums API's usage policies and avoid potential rate-limit blocks.
Audit Metadata