data-platform
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a script
scripts/databricks-libs.pythat fetches runtime library information from Databricks' official documentation atdocs.databricks.com. - [COMMAND_EXECUTION]: The skill uses
tmuxcommands (send-keysandcapture-pane) inreferences/cloud-auth.mdto execute cloud commands within a user-authenticated shell pane. This is designed as a safety measure to avoid handling interactive credentials directly within the agent's environment. - [DYNAMIC_EXECUTION]: The skill provides instructions in
references/databricks.mdfor installing thejupyter-databricks-kernel(a vendor-owned resource from the authori9wa4) and executing Jupyter notebooks locally. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface in
scripts/databricks-libs.py. - Ingestion points: The script fetches HTML content from the Databricks documentation site (
docs.databricks.com). - Boundary markers: None identified in the scraping or output generation process.
- Capability inventory: The script generates dependency configuration files (
pyproject.toml,requirements.txt) which are then used by the agent to configure local environments. - Sanitization: The script uses regular expressions to extract library names and versions from the HTML source.
Audit Metadata