migrating-dagster-to-airflow

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/validate_dag.py executes shell commands using subprocess.run. These commands are used for standard development tasks: ruff for code linting and the astro CLI for parsing Airflow DAGs. These operations are part of the 'validation ladder' designed to ensure the integrity of the generated code.
  • [COMMAND_EXECUTION]: The script scripts/inventory.py uses importlib.import_module and __import__ to perform runtime introspection of the user's Dagster project. This allows the tool to identify assets, schedules, and sensors defined in Python code. This is a standard approach for migration tools that require deep analysis of source code.
  • [EXTERNAL_DOWNLOADS]: The documentation references official Astro and Airflow resources, including the astro CLI and astronomer-cosmos package. These are well-known technology services provided by the vendor (astronomer) and are necessary for the target environment.
  • [SAFE]: The skill provides detailed security guidance for mapping secrets and environment variables using standard Airflow and Astro practices. It includes instructions for using kubectl to inventory existing Kubernetes secrets as part of a manual planning step, ensuring a secure and transparent migration of credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 09:30 PM
Security Audit — agent-trust-hub — migrating-dagster-to-airflow