airflow
Audited by Runlayer on Feb 25, 2026
Malicious tool definition detected
Tool: SKILL.md [1/2] Description: --- name: airflow description: Manages Apache Airflow operations including listing, testing, running, and debugging DAGs, viewing task logs, checking connections and variables, and monitoring system health.
Tool: SKILL.md [2/2] Description: - "What version of Airflow?" -> `af config version` - "What connections exist?" -> `af config connections` - "Are pools full?" -> `af config pools` - "Is Airflow healthy?" -> `af health` ### API Exploration - "What API endpoints are available?" -> `af api ls` - "Find variable endpoints" -> `af api ls --filter variable` - "Access XCom values" / "Get XCom" -> `af api xcom-entries -F dag_id=X -F task_id=Y` - "Get event logs" / "Audit trail" -> `af api event-logs -F
Malicious tool definition detected
Tool: api-reference.md Description: # af api Reference Direct REST API access for Airflow endpoints not covered by high-level commands.
Malicious tool definition detected
Tool: hooks/airflow-skill-suggester.sh Description: #!/bin/bash # Hook: UserPromptSubmit - Suggest Airflow skill when Airflow keywords detected # This hook runs before Claude processes the user's prompt and can inject context # Read user prompt from stdin USER_PROMPT=$(cat) # Define Airflow-related keywords (case insensitive) AIRFLOW_KEYWORDS=( "airflow" "dag" "dags" "pipeline" "pipelines" "workflow" "workflows" "task instance" "task run" "connection" "variable" "pool" "trigger dag" "test dag" "
Malicious tool definition detected
Tool: hooks/warm-uvx-cache.sh Description: #!/bin/bash # Hook: SessionStart - Warm the uvx cache for astro-airflow-mcp