datahub-catalog

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides legitimate technical documentation for configuring and using DataHub for metadata management.\n- [EXTERNAL_DOWNLOADS]: The skill instructions include installing the official DataHub Python package (acryl-datahub) and adding the official DataHub Helm repository (https://helm.datahubproject.io/). These are well-known and expected sources for the tool.\n- [SAFE]: The skill demonstrates security best practices by recommending environment variable substitution (e.g., ${DATAHUB_TOKEN}, ${AWS_SECRET_ACCESS_KEY}) for managing secrets within ingestion recipes.\n- [PROMPT_INJECTION]: The skill facilitates the ingestion of metadata from various external sources (databases, S3, Kafka), which represents a surface for indirect prompt injection.\n- Ingestion points: Metadata is ingested via YAML recipes from PostgreSQL, Hive, Kafka topics, S3 files, and dbt artifacts.\n- Boundary markers: The instructions do not define specific delimiters for separating ingested metadata from system instructions.\n- Capability inventory: The skill utilizes the datahub CLI, Python SDK emitters, and REST/GraphQL APIs for processing and storing metadata.\n- Sanitization: Content sanitization is not explicitly discussed, as the focus is on the technical ingestion mechanism. This surface is an inherent characteristic of the tool's intended use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 09:00 PM