developing-in-lightdash
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the official
lightdashCLI for core tasks including resource deployment, warehouse catalog discovery, and executing SQL queries. These commands are the intended and documented function of the vendor's toolset. - [EXTERNAL_DOWNLOADS]: Workflow examples for CI/CD pipelines reference the installation of official packages such as
@lightdash/clianddbt-corefrom public registries (NPM and PyPI). These are standard dependencies for the Lightdash platform and are considered safe vendor resources. - [CREDENTIALS_UNSAFE]: The skill includes instructions on how to handle authentication tokens and external connection secrets. It correctly guides users to use environment variables for sensitive values (e.g.,
LIGHTDASH_EXTERNAL_CONNECTION_SECRET_STRIPE_API) and explicitly warns against including secrets in YAML configuration files, following security best practices.
Audit Metadata