configuring-dbt-mcp-server
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides configuration guidance for dbt-labs' own tools and services. All external references, such as the remote server endpoint, target official dbt Cloud domains (
getdbt.com). - [SAFE]: The instructions explicitly recommend security best practices for handling credentials, such as using environment variable references (e.g.,
${DBT_TOKEN}) instead of literal values and ensuring that.envfiles are excluded from version control via.gitignore. - [SAFE]: The skill utilizes
uvx(a well-known Python package runner) to execute thedbt-mcppackage, which is the official tool provided by the vendor (dbt-labs) for this integration.
Audit Metadata