snowflake-platform

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFENO_CODE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents numerous legitimate administrative and development commands for the Snowflake CLI (snow), such as snow connection add, snow app run, and snow sql. These are standard tools for the platform's ecosystem.
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install the official snowflake-cli via pip install snowflake-cli. It also references documentation from the official snowflake.com domain. These are well-known, trusted sources for this specific platform.
  • [CREDENTIALS_UNSAFE]: The documentation references sensitive files such as ~/.snowflake/config.toml and rsa_key.p8. However, it follows security best practices by instructing users to manage these locally and use placeholders (e.g., {{APP_NAME}}, USERNAME) rather than providing or leaking actual credentials. It explicitly warns against sharing connection credentials in logs.
  • [NO_CODE]: The skill primarily consists of configuration templates (snowflake.yml, manifest.yml), SQL examples for Snowflake Cortex AI, and a TypeScript client template for the Snowflake REST API. There are no executable scripts or binaries included that pose a risk to the host environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:54 AM
Security Audit — agent-trust-hub — snowflake-platform