dbt-sf-to-bq-translator
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
AnomalyAnomalyscripts/dbt_translator.py
LOWAnomalyLOW
scripts/dbt_translator.py
The code is a dbt/Snowflake-to-BigQuery migration utility. It intentionally uploads source and metadata files to caller-selected Google Cloud Storage locations and performs cloud cleanup operations. No clear malware, credential theft, backdoor, or obfuscated payload is present. The main security issue is unsafe ZIP extraction via extractall, which should be replaced with validated extraction that rejects absolute paths and traversal components. Cloud uploads should require explicit authorization and careful validation of bucket and prefix parameters.
Confidence: 96%Severity: 58%
Audit Metadata