cosmos-dbt-fusion
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a Dockerfile configuration example that downloads the dbt Fusion installation script from the official dbt Labs content delivery network and executes it using the shell.
- [COMMAND_EXECUTION]: The skill configures the agent to use
InvocationMode.SUBPROCESS, which enables it to run thedbtbinary on the local filesystem to perform transformation tasks. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Data enters the agent's context through dbt project files and manifests located at paths defined in
ProjectConfig.dbt_project_pathandProjectConfig.manifest_pathinSKILL.md. - Boundary markers: The instructions do not specify delimiters or warnings to ignore instructions embedded within dbt model code or project metadata.
- Capability inventory: The skill performs local command execution via subprocess calls for dbt operations as defined in
SKILL.md. - Sanitization: The skill does not include specific validation or filtering steps for the content of the external dbt project files before processing.
Recommendations
- HIGH: Downloads and executes remote code from: https://public.cdn.getdbt.com/fs/install/install.sh - DO NOT USE without thorough review
Audit Metadata