cosmos-dbt-core

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
2
Flagged
2
Chunks
4
Flagged Files (2)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: cosmos-dbt-core description: Use when turning a dbt Core project into an Airflow DAG/TaskGroup using Astronomer Cosmos.

Tool: SKILL.md [2/2] Description: profile_config=profile_config, project_dir=DBT_PROJ_DIR, task_id="seed", dbt_cmd_flags=["--select", "raw_customers"], install_deps=True, append_env=True, ) check_file_uploaded_task = PythonOperator( task_id="check_file_uploaded_task", python_callable=check_s3_file, op_kwargs={ "aws_conn_id": "aws_s3_conn", "bucket_name": "cosmos-artifacts-upload", "file_key": "target/run_results.json", }, ) run_operator = DbtRunLocalOperator( profile_config=profile_config, proje

reference/cosmos-config.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/cosmos-config.md [1/2] Description: # Cosmos Configuration Reference (Core) This reference covers detailed Cosmos configuration for **dbt Core** projects.

Tool: reference/cosmos-config.md [2/2] Description: in `ExecutionConfig`: | Option | Behavior | |--------|----------| | `eager` | Run test if ANY parent is selected (may fail if other parents not built) | | `buildable` | Run test only if selected node or its ancestors are selected | | `cautious` | Only run tests for explicitly selected models | | `empty` | Run no tests | ```python from cosmos import ExecutionConfig, TestIndirectSelection _execution_config = ExecutionConfig( test_indirect_selecti

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
2
Chunks Analyzed
4
Analyzed
Feb 21, 2026, 03:29 AM
Security Audit — runlayer — cosmos-dbt-core