databricks-ai-runtime
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for building Docker images that download the AWS EFA (Elastic Fabric Adapter) installer from an Amazon S3 bucket (https://s3-us-west-2.amazonaws.com/aws-efa-installer/). This is a standard operation for configuring GPU networking on AWS.\n- [REMOTE_CODE_EXECUTION]: The Dockerfile instructions include executing the downloaded efa_installer.sh script to set up networking components. The source is an official Amazon S3 bucket.\n- [COMMAND_EXECUTION]: The skill describes the use of the air CLI tool to run workloads and manage Docker images. This involves executing shell commands to interact with the Databricks AI Runtime.\n- [INDIRECT_PROMPT_INJECTION]: The skill guides the agent to process YAML configuration files (workload.yaml) which are then passed to the air CLI for execution. This workflow creates an ingestion surface where untrusted data could potentially influence the commands executed by the agent.\n
- Ingestion points: YAML configuration files defined in SKILL.md and docker-images.md.\n
- Boundary markers: None provided in the instructions.\n
- Capability inventory: Command execution via the air run CLI command.\n
- Sanitization: None described for the YAML content before processing.
Audit Metadata