skills/columnar-tech/skills/adbc/Gen Agent Trust Hub

adbc

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for installing the dbc database driver tool using standard package managers including uv, pipx, brew, and winget. These installation paths reference official and vendor-owned repositories (columnar-tech/tap/dbc).
  • [DATA_EXPOSURE]: Detailed guidance is provided for managing sensitive database credentials (passwords, tokens, and private keys) for drivers like Snowflake and FlightSQL. The skill promotes secure practices by instructing users to utilize environment variables or connection profiles rather than hardcoding secrets into source code.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes functionality for processing external data via database queries and Parquet file ingestion.
  • Ingestion points: SQL result sets and Parquet files (e.g., penguins.parquet) are processed in the language-specific usage examples.
  • Boundary markers: The instructions do not define specific prompt boundary markers, as the skill is primarily code and library documentation.
  • Capability inventory: The skill enables database interactions, local file system reading (for Parquet files), and network communication via gRPC (FlightSQL).
  • Sanitization: Code examples demonstrate the use of bind parameters (e.g., ?) to prevent SQL injection and rely on Apache Arrow's typed data structures for robust data handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 03:40 PM
Security Audit — agent-trust-hub — adbc