maintain
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation and the wrapper script recommend installing the
uvtool via a shell script fromhttps://astral.sh/uv/install.sh. This is a well-known installation method for the Astraluvutility and is considered a safe reference to an established technology provider.\n- [COMMAND_EXECUTION]: Thescripts/run.pyscript utilizessubprocess.run()to pre-warm the environment andos.execvp()to execute theuvcommand that runs the skill's engine. These calls are essential for the skill's primary function of executing its project maintenance logic.\n- [DYNAMIC_EXECUTION]: The skill dynamically constructs its execution environment by determining necessary package extras forexmergo-dex-corebased on project configuration and CLI flags. It then usesuv runto install and run these dependencies hermetically.\n- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: The skill reads dbt project files, warehouse schemas, and a local snapshot file (
.dex/snapshot.json).\n - Boundary markers: Output from the underlying engine is returned in a structured JSON envelope to separate findings from operational data.\n
- Capability inventory: The skill is capable of executing shell commands via
uvthrough therun.pywrapper script.\n - Sanitization: The engine logic (within
exmergo-dex-core) is designed to produce sanitized JSON output according to a defined command contract.
Audit Metadata