dagster
Warn
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
run_commandtool to executedocker execanddocker composecommands, which grants the agent significant control over the local Docker environment.\n- [COMMAND_EXECUTION]: The troubleshooting section contains destructive commands such asdocker compose down --volumes --rmi allwhich remove persistent data and images without adequate warning.\n- [INDIRECT_PROMPT_INJECTION]: The skill uses string interpolation for<asset_key>and<partition_date>in shell commands. If these inputs are sourced from untrusted data, they could be used to perform command injection.\n - Ingestion points:
<asset_key>and<partition_date>variables used inSKILL.md.\n - Boundary markers: None present.\n
- Capability inventory: Shell command execution via
docker execanddocker compose.\n - Sanitization: No input validation or escaping is defined for the interpolated arguments.
Audit Metadata