dataform-bigquery
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill ensures the necessary environment is set up by installing the official
@dataform/clipackage from the npm registry if it is not already present. This is a standard requirement for Dataform development. - [COMMAND_EXECUTION]: The skill uses established command-line interfaces, specifically
gcloud,bq, anddataform, to perform essential tasks such as repository initialization, metadata retrieval, and code compilation. These operations are limited to the scope of managing BigQuery assets and Dataform configurations. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific files and data from BigQuery to provide context-aware assistance.
- Ingestion points: Reads Dataform configuration files (
workflow_settings.yaml), SQLX scripts, BigQuery table schemas, and sample data records. - Boundary markers: The skill does not employ explicit delimiters or specialized safety instructions to isolate ingested data from its core logic.
- Capability inventory: The skill possesses the capability to execute shell commands, perform file system operations, and interact with cloud APIs.
- Sanitization: There is no evidence of specific sanitization or filtering applied to the data fetched from the environment before it is used for planning or code generation.
Audit Metadata