skills/jeremylongshore/tons-of-skills-marketplace/snowflake-failover-readiness-drill/Gen Agent Trust Hub
snowflake-failover-readiness-drill
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
collect_snowflake_evidence.pyscript executes the Snowflake CLI (snow sql) to fetch read-only evidence. This is restricted to specific, reviewed SQL templates and is a core part of the skill's intended monitoring purpose. - [REMOTE_CODE_EXECUTION]: No remote code execution was detected. The skill uses local scripts and reviewed SQL templates.
- [DATA_EXFILTRATION]: Evidence is projected through privacy-preserving SQL (hashing and object construction) inside Snowflake before collection. No raw identifiers or credentials leave the session.
- [PROMPT_INJECTION]: The skill instructions emphasize non-negotiable safety boundaries and deterministic verification, reducing the surface for instruction overrides.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes Snowflake evidence (untrusted data), the
analyze_failover_readiness.pyscript uses strict schema validation, type checking, and regex-based input filtering to prevent schema confusion or command injection.
Audit Metadata