spark-connect
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/check_spark_env.pyusessubprocess.runto call the official Databricks CLI and theuvpackage manager for environment checks and configuration. \n- [EXTERNAL_DOWNLOADS]: The skill manages the installation of thedatabricks-connectpackage from a public registry, ensuring the local version matches the remote cluster's runtime version. \n- [INDIRECT_PROMPT_INJECTION]: The scriptscripts/check_spark_env.pyparses JSON output from the Databricks CLI, representing a potential data ingestion surface. \n - Ingestion points: Output from the
databricks clusters getcommand. \n - Boundary markers: None. \n
- Capability inventory: The script executes subprocesses to install packages via
uv. \n - Sanitization: The script uses
json.loadsfor structured parsing and a strict regular expression(\d+\.\d+)to validate the version string before use. \n- [DYNAMIC_EXECUTION]: The skill dynamically constructs installation commands to pin thedatabricks-connectpackage to the specific version required by the target cluster.
Audit Metadata