databricks-lakebase-autoscale
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill follows security best practices for managing short-lived database credentials. It utilizes the Databricks SDK to generate OAuth tokens with a 1-hour expiry and provides patterns for automatic token refresh in production environments.
- [COMMAND_EXECUTION]: The connection patterns include a diagnostic utility for macOS that uses subprocess.run to call the system dig command. This is used as a fallback for DNS resolution issues and is implemented securely using the list-based argument format to prevent shell injection.
- [EXTERNAL_DOWNLOADS]: Recommends the installation of standard, well-known libraries including databricks-sdk, psycopg, sqlalchemy, and fastapi for building and connecting to database applications.
- [SAFE]: A hardcoded connection string pattern identified by automated scanners was verified to be a non-executable documentation template within a code comment (# LAKEBASE_PG_URL=...), posing no risk.
Audit Metadata