The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on Bash(databricks:*) and Bash(aws:*) to perform environment discovery and administrative tasks. These operations are essential for auditing Hive Metastore (HMS) and Unity Catalog (UC) configurations.
[COMMAND_EXECUTION]: The bundled Python scripts, audit-hms-readiness.py and enable-system-schemas.py, invoke the databricks CLI to fetch table metadata and apply configuration changes. These scripts utilize subprocess.run with list-style arguments to prevent shell injection.
[SAFE]: The enable-system-schemas.py script implements input sanitization (e.g., stripping backticks from group names) and performs role-scope pre-checks to ensure that administrative mutations are only attempted by users with Account Admin privileges.
[SAFE]: Heuristic detections of prompt injection patterns in eval-spec.yaml are false positives; these patterns are contained within test cases designed to evaluate the agent's resistance to such attacks.
[SAFE]: The skill's interaction with the AWS CLI is limited to read-only operations (aws sts get-caller-identity, aws iam get-role) for diagnosing storage credential issues, with no capabilities to mutate cloud infrastructure.

databricks-uc-migration-pilot