dbt-skill
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists primarily of instructional markdown files and standard dbt project templates. No malicious behavior was identified.
- [COMMAND_EXECUTION]: The skill includes a shell script (
scripts/dbt-lint-check.sh) designed to perform local linting and compilation checks usingdbtandsqlfluff. This is legitimate functionality for a developer-oriented tool. - [EXTERNAL_DOWNLOADS]: The documentation references standard dbt packages (e.g.,
dbt-utils,dbt-expectations,elementary) and official dbt-adapter packages. These are well-known, trusted resources within the data engineering ecosystem. - [CREDENTIALS_SAFE]: While the skill discusses warehouse configuration, it correctly instructs users to use environment variables or GitHub secrets (
${{ secrets.SNOWFLAKE_CI_USER }}) and warns against committing sensitive files likeprofiles.yml.
Audit Metadata