snowflake-dbt-airbnb-analytics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text from the public Inside Airbnb dataset is ingested at runtime via scripts/load_inside_airbnb_to_snowflake.py (uploads data/raw/*.csv.gz and COPY INTO RAW.LISTINGS), and those CSV fields become readable text in Snowflake and then into dbt/LLM context through downstream model queries.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's installation/run steps explicitly clone and run code from an external GitHub repository (git clone https://github.com/analyticsdurgesh/Snowflake_DBT_Project.git), and running dbt (dbt deps) will also fetch and execute remote package code (dbt-labs/dbt_utils), so remote code is fetched and executed as a required dependency.