configuring-dbt-mcp-server
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill handles sensitive authentication data (DBT_TOKEN, account IDs) by providing configuration templates. It follows security best practices by recommending the use of environment variables and .env files, and it includes a specific 'Credential Security' section warning against hardcoding or logging secrets.
- [EXTERNAL_DOWNLOADS]: Setup instructions utilize the 'uvx' tool to fetch and run the 'dbt-mcp' package. These are official tools from well-known technology organizations (Astral and dbt Labs).
- [COMMAND_EXECUTION]: The skill provides instructions for standard administrative commands (such as 'pwd', 'which', 'where', and 'uvx') to discover project paths and initiate the server. These are routine tasks for setting up and verifying development environments.
Audit Metadata