datahub-setup
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official 'acryl-datahub' Python package from the standard PyPI registry. This dependency is necessary for the skill's primary function and originates from the recognized vendor for DataHub technology.
- [CREDENTIALS_UNSAFE]: While the skill manages personal access tokens for DataHub authentication, it includes strict guardrails for the agent to never display, log, or echo these secrets in its output, using placeholder redaction instead.
- [PRIVILEGE_ESCALATION]: The skill enforces least-privilege principles by requiring the use of Python virtual environments, explicitly warning against the use of 'sudo' for package installations, and instructing the agent to set restrictive file permissions ('chmod 600') on sensitive configuration files.
Audit Metadata