databricks-setup-local
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Databricks workspace (e.g., job task keys and cluster metadata) which is used to modify local configuration files and provision environments.
- Ingestion points: External data enters the context via
databricks jobs getanddatabricks clusters listoutput as described inSKILL.mdandreferences/examples.md. - Boundary markers: The instructions require using
--output jsonand specificjqfilters to maintain structural boundaries for ingested data. - Capability inventory: The agent has the capability to write to
pyproject.toml, modify bundle YAML sources, and execute commands through theuvpackage manager. - Sanitization: All state-changing operations require explicit user approval following a displayed plan from a
--dry-runexecution. - [COMMAND_EXECUTION]: The skill uses the
databricksCLI anduvpackage manager to execute environment setup, authentication, and diagnostic commands. - [EXTERNAL_DOWNLOADS]: Mentions the installation of the
uvpackage manager and references official Databricks GitHub repositories for issue reporting. The skill documentation specifically advises against the use of silent or remote installers for security purposes and provides guidance on safely redacting reports.
Audit Metadata