dbt-sf-to-bq-translator
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution via Subprocess: The skill uses Python's
subprocessmodule to orchestrate the migration process. Specifically, it calls thegcloudCLI to manage Google Cloud Storage (GCS) assets and to trigger the BigQuery Migration Service. This is a functional requirement for the skill to perform its primary task of bulk SQL translation. - External Service Integration: The skill interacts with standard Google Cloud APIs, including the BigQuery Migration Service and Cloud Storage. The instructions correctly prompt the user to authenticate using the
gcloud auth loginflow, ensuring that operations are performed within the user's own security context. - Safe SQL and Configuration Parsing: The skill implements robust data handling by using
yaml.safe_load()for configuration files and the Pythonast(Abstract Syntax Tree) module for SQL configuration transformations. These practices prevent the unintended execution of data-driven code during the translation process. - Dependency Management: The bundled scripts include a requirements block specifying standard libraries like
pyyaml. The skill does not perform any unverified remote code execution or download scripts from unknown sources.
Audit Metadata