databricks-pipelines
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill guides the agent in building pipelines that ingest data from external sources, presenting a standard attack surface for indirect prompt injection.\n- Ingestion points: The skill utilizes
read_files,read_kafka, and other streaming sources to bring external data into the Databricks environment, as documented inSKILL.mdand format-specific references likereferences/kafka.md.\n- Boundary markers: Safe development practices are encouraged through the use of explicit schemas andExpectations(e.g.,@dp.expect_or_fail), which establish validation boundaries for incoming data.\n- Capability inventory: Capabilities include project deployment via the officialdatabricksCLI and the execution of data processing tasks using Spark SQL and Python on Databricks clusters.\n- Sanitization: The skill demonstrates data sanitization by usingfrom_jsonwith strict schemas and implementing quarantine patterns for malformed data using therescuedDataColumnfeature.
Audit Metadata