databricks-zerobus-ingest
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides documentation and examples for ingesting data into Databricks using official SDKs and protocols.
- [EXTERNAL_DOWNLOADS]: The skill references several official repositories and resources from the vendor for building SDKs from source and deploying monitoring dashboards:
- Fetches the SDK source code from Databricks' official GitHub repository (github.com/databricks/zerobus-sdk).
- Downloads monitoring dashboard configurations from the Databricks Solutions repository (github.com/databricks-solutions/zerobus-ingest-examples).
- References official IP ranges for serverless compute (databricks.com/networking/v1/ip-ranges.json).
- [COMMAND_EXECUTION]: The skill provides instructions for using the Databricks CLI to manage service principals, secrets, and Unity Catalog resources. It also includes examples for installing packages via standard package managers (pip, npm, mvn).
- [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface for ingesting external application events and telemetry data into Delta tables. However, the ingestion process includes authoritative server-side validation against the table schema, and the skill itself does not perform dangerous operations using the ingested data.
Audit Metadata