databricks-core
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute an installation script from the official Databricks repository using a shell pipeline (curl | sh).
- [EXTERNAL_DOWNLOADS]: The skill downloads CLI binaries and installation scripts from official Databricks GitHub repositories (github.com/databricks).
- [COMMAND_EXECUTION]: The skill executes various Databricks CLI commands for authentication, cluster management, and data exploration, as well as shell commands for version verification.
- [PERSISTENCE]: The installation guide recommends adding the Databricks CLI path to shell initialization files such as ~/.bashrc or ~/.zshrc.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from SQL query results and schema discovery, which presents a potential injection surface. (1) Ingestion points: SQL query results and table/schema metadata retrieved through Databricks CLI tools. (2) Boundary markers: The skill documentation specifies the use of backticks for SQL identifiers. (3) Capability inventory: Execution of SQL queries, CLI operations, and bash shell commands. (4) Sanitization: Relies on identifier quoting and structured output formats from official tools.
Audit Metadata