snowflake-platform
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFENO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents numerous legitimate administrative and development commands for the Snowflake CLI (
snow), such assnow connection add,snow app run, andsnow sql. These are standard tools for the platform's ecosystem. - [EXTERNAL_DOWNLOADS]: The skill instructs users to install the official
snowflake-cliviapip install snowflake-cli. It also references documentation from the officialsnowflake.comdomain. These are well-known, trusted sources for this specific platform. - [CREDENTIALS_UNSAFE]: The documentation references sensitive files such as
~/.snowflake/config.tomlandrsa_key.p8. However, it follows security best practices by instructing users to manage these locally and use placeholders (e.g.,{{APP_NAME}},USERNAME) rather than providing or leaking actual credentials. It explicitly warns against sharing connection credentials in logs. - [NO_CODE]: The skill primarily consists of configuration templates (
snowflake.yml,manifest.yml), SQL examples for Snowflake Cortex AI, and a TypeScript client template for the Snowflake REST API. There are no executable scripts or binaries included that pose a risk to the host environment.
Audit Metadata