supervisor-api-client-function-calling
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional code samples using official Databricks SDKs (
databricks.sdkanddatabricks_openai) to interact with the Databricks Supervisor API. These resources are legitimate vendor tools. - [SAFE]: The implementation examples demonstrate a secure execution pattern by using a predefined mapping (
CLIENT_TOOLS) to validate tool names before execution. This explicitly prevents the client from accidentally executing server-side or unknown tool calls locally. - [SAFE]: The code uses standard
json.loads()for parsing structured arguments from the model output, avoiding dynamic execution risks such aseval()orexec(). - [SAFE]: The skill correctly handles conversation history echoing, which is a requirement of the Supervisor API protocol, without introducing dangerous persistence or data exfiltration vectors.
Audit Metadata