dbt-skill

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists primarily of instructional markdown files and standard dbt project templates. No malicious behavior was identified.
  • [COMMAND_EXECUTION]: The skill includes a shell script (scripts/dbt-lint-check.sh) designed to perform local linting and compilation checks using dbt and sqlfluff. This is legitimate functionality for a developer-oriented tool.
  • [EXTERNAL_DOWNLOADS]: The documentation references standard dbt packages (e.g., dbt-utils, dbt-expectations, elementary) and official dbt-adapter packages. These are well-known, trusted resources within the data engineering ecosystem.
  • [CREDENTIALS_SAFE]: While the skill discusses warehouse configuration, it correctly instructs users to use environment variables or GitHub secrets (${{ secrets.SNOWFLAKE_CI_USER }}) and warns against committing sensitive files like profiles.yml.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 12:44 AM