The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes various CLI commands for the Snowflake CLI (snow), such as snow streamlit deploy and snow stage put, as well as openssl commands for generating RSA keys. These are standard developer tools for the intended workflow.
[EXTERNAL_DOWNLOADS]: The templates (e.g., templates-container-runtime/requirements.txt and templates/environment.yml) reference downloading Python packages from the Snowflake Anaconda Channel and PyPI. These are well-known, trusted registries for software dependencies.
[INDIRECT_PROMPT_INJECTION]: The provided templates, such as data_explorer.py and streamlit_app.py, ingest user input via Streamlit widgets to execute SQL queries. This constitutes a potential attack surface; however, the skill explicitly provides mitigation logic including regex-based identifier validation and identifier quoting to prevent SQL injection.
[CREDENTIALS_UNSAFE]: The references/authentication.md file provides instructions on managing Snowflake credentials and mentions sensitive paths like ~/.snowflake/connections.toml. The documentation follows security best practices by advising against hardcoding passwords and recommending the use of environment variables or key-pair authentication.

streamlit-snowflake