databricks-app-apx

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill initializes its framework by downloading and executing code directly from the vendor's repository.
  • Evidence: uvx --from git+https://github.com/databricks-solutions/apx.git apx init in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: Recommends the installation of external development utilities uv and bun via the Homebrew package manager.
  • Evidence: brew install uv, brew tap oven-sh/bun, and brew install bun in SKILL.md.
  • [COMMAND_EXECUTION]: Utilizes the mcp-cli tool to interact with local development servers and code quality checkers.
  • Evidence: Calls to apx/start, apx/status, and apx/dev_check in SKILL.md.
  • [COMMAND_EXECUTION]: Automates the retrieval and execution of UI component installation commands.
  • Evidence: mcp-cli call shadcn/get_add_command_for_items in SKILL.md which generates commands for the user to execute.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 02:51 PM
Security Audit — agent-trust-hub — databricks-app-apx