datalens-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
scripts/bootstrap.shto manage the environment andpythonto load SDK instructions. All executions are scoped to the user's project directory and follow a strict identity verification process to ensure the correct environment is targeted. - [EXTERNAL_DOWNLOADS]: The bootstrap script may download the
datalens-sdkpackage via standard Python package managers (pip, uv, poetry) from configured registries. These operations are performed only after local environment validation and, in managed projects, require explicit user consent. - [SAFE]: The skill adheres to security best practices by avoiding hand-built HTTP requests, preventing installations into system Python, and requiring explicit human-in-the-loop confirmation for all state-changing operations like SDK installations or upgrades. All resources (SDK, documentation, changelogs) trace back to the official vendor infrastructure.
Audit Metadata