dbt-sf-to-bq-translator

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill uses the gcloud CLI to manage Cloud Storage and BigQuery Migration workflows. These interactions are handled via Python's subprocess.run using list-based arguments, which is a secure method that helps prevent shell injection.
  • External Service Integration: The skill connects to official Google Cloud APIs for migration and storage. These connections are managed through the user's authenticated gcloud session and target well-known service endpoints.
  • Data Processing: To ensure accurate translation of dbt models, the skill uses the Python ast module to structurally parse and modify configuration blocks. This approach allows for structural analysis of the configuration metadata without executing the code.
  • Dependency and Resource Management: The skill uses standard libraries like pyyaml for configuration handling and follows practices for temporary file management using the tempfile and shutil modules.
  • Attribution and Transparency: An attribution mechanism is included to identify skill-related API calls. This is implemented using environment variables and includes instructions for user opt-out, prioritizing transparency and user control.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 08:24 AM